Kubernetes API Object Explorer

Apps

• Pod Pod is a collection of containers that can run on a host. This resource is
  created by clients and scheduled onto hosts.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Specification of the desired behavior of the pod. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    PodSpec is a description of a pod.
    
    

    • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
      StartTime before the system will actively try to mark it failed and kill
      associated containers. Value must be a positive integer.
      
    • affinity (Object) If specified, the pod's scheduling constraints
      
      Affinity is a group of affinity scheduling rules.
      
      

      • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
        
        Node affinity is a group of node affinity scheduling rules.
        
        

        • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
          affinity expressions specified by this field, but it may choose a node that
          violates one or more of the expressions. The node that is most preferred is
          the one with the greatest sum of weights, i.e. for each node that meets all
          of the scheduling requirements (resource request, requiredDuringScheduling
          affinity expressions, etc.), compute a sum by iterating through the
          elements of this field and adding "weight" to the sum if the node matches
          the corresponding matchExpressions; the node(s) with the highest sum are
          the most preferred.
          
          An empty preferred scheduling term matches all objects with implicit weight
          0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
          (i.e. is also a no-op).
          
          

          • preference (Object) A node selector term, associated with the corresponding weight.
            
            A null or empty node selector term matches no objects. The requirements of
            them are ANDed. The TopologySelectorTerm type implements a subset of the
            NodeSelectorTerm.
            
            

            • matchExpressions ([]Object) A list of node selector requirements by node's labels.
              
              A node selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) The label key that the selector applies to.
                
              • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                NotIn, Exists, DoesNotExist. Gt, and Lt.
                
                
                
              • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                must be non-empty. If the operator is Exists or DoesNotExist, the values
                array must be empty. If the operator is Gt or Lt, the values array must
                have a single element, which will be interpreted as an integer. This array
                is replaced during a strategic merge patch.
                
            • matchFields ([]Object) A list of node selector requirements by node's fields.
              
              A node selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) The label key that the selector applies to.
                
              • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                NotIn, Exists, DoesNotExist. Gt, and Lt.
                
                
                
              • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                must be non-empty. If the operator is Exists or DoesNotExist, the values
                array must be empty. If the operator is Gt or Lt, the values array must
                have a single element, which will be interpreted as an integer. This array
                is replaced during a strategic merge patch.
                
          • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
            range 1-100.
            
        • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
          scheduling time, the pod will not be scheduled onto the node. If the
          affinity requirements specified by this field cease to be met at some point
          during pod execution (e.g. due to an update), the system may or may not try
          to eventually evict the pod from its node.
          
          A node selector represents the union of the results of one or more label
          queries over a set of nodes; that is, it represents the OR of the selectors
          represented by the node selector terms.
          
          

          • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
            
            A null or empty node selector term matches no objects. The requirements of
            them are ANDed. The TopologySelectorTerm type implements a subset of the
            NodeSelectorTerm.
            
            

            • matchExpressions ([]Object) A list of node selector requirements by node's labels.
              
              A node selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) The label key that the selector applies to.
                
              • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                NotIn, Exists, DoesNotExist. Gt, and Lt.
                
                
                
              • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                must be non-empty. If the operator is Exists or DoesNotExist, the values
                array must be empty. If the operator is Gt or Lt, the values array must
                have a single element, which will be interpreted as an integer. This array
                is replaced during a strategic merge patch.
                
            • matchFields ([]Object) A list of node selector requirements by node's fields.
              
              A node selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) The label key that the selector applies to.
                
              • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                NotIn, Exists, DoesNotExist. Gt, and Lt.
                
                
                
              • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                must be non-empty. If the operator is Exists or DoesNotExist, the values
                array must be empty. If the operator is Gt or Lt, the values array must
                have a single element, which will be interpreted as an integer. This array
                is replaced during a strategic merge patch.
                
      • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
        same node, zone, etc. as some other pod(s)).
        
        Pod affinity is a group of inter pod affinity scheduling rules.
        
        

        • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
          affinity expressions specified by this field, but it may choose a node that
          violates one or more of the expressions. The node that is most preferred is
          the one with the greatest sum of weights, i.e. for each node that meets all
          of the scheduling requirements (resource request, requiredDuringScheduling
          affinity expressions, etc.), compute a sum by iterating through the
          elements of this field and adding "weight" to the sum if the node has pods
          which matches the corresponding podAffinityTerm; the node(s) with the
          highest sum are the most preferred.
          
          The weights of all of the matched WeightedPodAffinityTerm fields are added
          per-node to find the most preferred node(s)
          
          

          • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
            
            Defines a set of pods (namely those matching the labelSelector relative to
            the given namespace(s)) that this pod should be co-located (affinity) or
            not co-located (anti-affinity) with, where co-located is defined as running
            on a node whose value of the label with key (topologyKey) matches that of
            any node on which a pod of the set of pods is running
            
            

            • labelSelector (Object) A label query over a set of resources, in this case pods.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
              is applied to the union of the namespaces selected by this field and the
              ones listed in the namespaces field. null selector and null or empty
              namespaces list means "this pod's namespace". An empty selector ({})
              matches all namespaces. This field is beta-level and is only honored when
              PodAffinityNamespaceSelector feature is enabled.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
              to. The term is applied to the union of the namespaces listed in this field
              and the ones selected by namespaceSelector. null or empty namespaces list
              and null namespaceSelector means "this pod's namespace"
              
            • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
              with the pods matching the labelSelector in the specified namespaces, where
              co-located is defined as running on a node whose value of the label with
              key topologyKey matches that of any node on which any of the selected pods
              is running. Empty topologyKey is not allowed.
              
          • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
            range 1-100.
            
        • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
          scheduling time, the pod will not be scheduled onto the node. If the
          affinity requirements specified by this field cease to be met at some point
          during pod execution (e.g. due to a pod label update), the system may or
          may not try to eventually evict the pod from its node. When there are
          multiple elements, the lists of nodes corresponding to each podAffinityTerm
          are intersected, i.e. all terms must be satisfied.
          
          Defines a set of pods (namely those matching the labelSelector relative to
          the given namespace(s)) that this pod should be co-located (affinity) or
          not co-located (anti-affinity) with, where co-located is defined as running
          on a node whose value of the label with key (topologyKey) matches that of
          any node on which a pod of the set of pods is running
          
          

          • labelSelector (Object) A label query over a set of resources, in this case pods.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
            is applied to the union of the namespaces selected by this field and the
            ones listed in the namespaces field. null selector and null or empty
            namespaces list means "this pod's namespace". An empty selector ({})
            matches all namespaces. This field is beta-level and is only honored when
            PodAffinityNamespaceSelector feature is enabled.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
            to. The term is applied to the union of the namespaces listed in this field
            and the ones selected by namespaceSelector. null or empty namespaces list
            and null namespaceSelector means "this pod's namespace"
            
          • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
            with the pods matching the labelSelector in the specified namespaces, where
            co-located is defined as running on a node whose value of the label with
            key topologyKey matches that of any node on which any of the selected pods
            is running. Empty topologyKey is not allowed.
            
      • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
        in the same node, zone, etc. as some other pod(s)).
        
        Pod anti affinity is a group of inter pod anti affinity scheduling rules.
        
        

        • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
          anti-affinity expressions specified by this field, but it may choose a node
          that violates one or more of the expressions. The node that is most
          preferred is the one with the greatest sum of weights, i.e. for each node
          that meets all of the scheduling requirements (resource request,
          requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
          iterating through the elements of this field and adding "weight" to the sum
          if the node has pods which matches the corresponding podAffinityTerm; the
          node(s) with the highest sum are the most preferred.
          
          The weights of all of the matched WeightedPodAffinityTerm fields are added
          per-node to find the most preferred node(s)
          
          

          • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
            
            Defines a set of pods (namely those matching the labelSelector relative to
            the given namespace(s)) that this pod should be co-located (affinity) or
            not co-located (anti-affinity) with, where co-located is defined as running
            on a node whose value of the label with key (topologyKey) matches that of
            any node on which a pod of the set of pods is running
            
            

            • labelSelector (Object) A label query over a set of resources, in this case pods.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
              is applied to the union of the namespaces selected by this field and the
              ones listed in the namespaces field. null selector and null or empty
              namespaces list means "this pod's namespace". An empty selector ({})
              matches all namespaces. This field is beta-level and is only honored when
              PodAffinityNamespaceSelector feature is enabled.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
              to. The term is applied to the union of the namespaces listed in this field
              and the ones selected by namespaceSelector. null or empty namespaces list
              and null namespaceSelector means "this pod's namespace"
              
            • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
              with the pods matching the labelSelector in the specified namespaces, where
              co-located is defined as running on a node whose value of the label with
              key topologyKey matches that of any node on which any of the selected pods
              is running. Empty topologyKey is not allowed.
              
          • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
            range 1-100.
            
        • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
          scheduling time, the pod will not be scheduled onto the node. If the
          anti-affinity requirements specified by this field cease to be met at some
          point during pod execution (e.g. due to a pod label update), the system may
          or may not try to eventually evict the pod from its node. When there are
          multiple elements, the lists of nodes corresponding to each podAffinityTerm
          are intersected, i.e. all terms must be satisfied.
          
          Defines a set of pods (namely those matching the labelSelector relative to
          the given namespace(s)) that this pod should be co-located (affinity) or
          not co-located (anti-affinity) with, where co-located is defined as running
          on a node whose value of the label with key (topologyKey) matches that of
          any node on which a pod of the set of pods is running
          
          

          • labelSelector (Object) A label query over a set of resources, in this case pods.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
            is applied to the union of the namespaces selected by this field and the
            ones listed in the namespaces field. null selector and null or empty
            namespaces list means "this pod's namespace". An empty selector ({})
            matches all namespaces. This field is beta-level and is only honored when
            PodAffinityNamespaceSelector feature is enabled.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
            to. The term is applied to the union of the namespaces listed in this field
            and the ones selected by namespaceSelector. null or empty namespaces list
            and null namespaceSelector means "this pod's namespace"
            
          • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
            with the pods matching the labelSelector in the specified namespaces, where
            co-located is defined as running on a node whose value of the label with
            key topologyKey matches that of any node on which any of the selected pods
            is running. Empty topologyKey is not allowed.
            
    • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
      should be automatically mounted.
      
    • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
      added or removed. There must be at least one container in a Pod. Cannot be
      updated.
      
      A single application container that you want to run within a pod.
      
      

      • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
        provided. Variable references $(VAR_NAME) are expanded using the
        container's environment. If a variable cannot be resolved, the reference in
        the input string will be unchanged. Double $$ are reduced to a single $,
        which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
        produce the string literal "$(VAR_NAME)". Escaped references will never be
        expanded, regardless of whether the variable exists or not. Cannot be
        updated. More info:
        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
        
      • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
        ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
        are expanded using the container's environment. If a variable cannot be
        resolved, the reference in the input string will be unchanged. Double $$
        are reduced to a single $, which allows for escaping the $(VAR_NAME)
        syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
        Escaped references will never be expanded, regardless of whether the
        variable exists or not. Cannot be updated. More info:
        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
        
      • env ([]Object) List of environment variables to set in the container. Cannot be updated.
        
        EnvVar represents an environment variable present in a Container.
        
        

        • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
          
        • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
          environment variables in the container and any service environment
          variables. If a variable cannot be resolved, the reference in the input
          string will be unchanged. Double $$ are reduced to a single $, which allows
          for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
          string literal "$(VAR_NAME)". Escaped references will never be expanded,
          regardless of whether the variable exists or not. Defaults to "".
          
        • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
          empty.
          
          EnvVarSource represents a source for the value of an EnvVar.
          
          

          • configMapKeyRef (Object) Selects a key of a ConfigMap.
            
            Selects a key from a ConfigMap.
            
            

            • key (string) The key to select.
              
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its key must be defined
              
          • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
            `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
            spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
            
            ObjectFieldSelector selects an APIVersioned field of an object.
            
            

            • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
              "v1".
              
            • fieldPath (string) Path of the field to select in the specified API version.
              
          • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
            (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
            requests.memory and requests.ephemeral-storage) are currently supported.
            
            ResourceFieldSelector represents container resources (cpu, memory) and
            their output format
            
            

            • containerName (string) Container name: required for volumes, optional for env vars
              
            • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • resource (string) Required: resource to select
              
          • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
            
            SecretKeySelector selects a key of a Secret.
            
            

            • key (string) The key of the secret to select from. Must be a valid secret key.
              
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret or its key must be defined
              
      • envFrom ([]Object) List of sources to populate environment variables in the container. The
        keys defined within a source must be a C_IDENTIFIER. All invalid keys will
        be reported as an event when the container is starting. When a key exists
        in multiple sources, the value associated with the last source will take
        precedence. Values defined by an Env with a duplicate key will take
        precedence. Cannot be updated.
        
        EnvFromSource represents the source of a set of ConfigMaps
        
        

        • configMapRef (Object) The ConfigMap to select from
          
          ConfigMapEnvSource selects a ConfigMap to populate the environment
          variables with.
          
          The contents of the target ConfigMap's Data field will represent the
          key-value pairs as environment variables.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the ConfigMap must be defined
            
        • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
          C_IDENTIFIER.
          
        • secretRef (Object) The Secret to select from
          
          SecretEnvSource selects a Secret to populate the environment variables
          with.
          
          The contents of the target Secret's Data field will represent the key-value
          pairs as environment variables.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the Secret must be defined
            
      • image (string) Docker image name. More info:
        https://kubernetes.io/docs/concepts/containers/images This field is
        optional to allow higher level config management to default or override
        container images in workload controllers like Deployments and StatefulSets.
        
      • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
        if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
        More info:
        https://kubernetes.io/docs/concepts/containers/images#updating-images
        
        
        
      • lifecycle (Object) Actions that the management system should take in response to container
        lifecycle events. Cannot be updated.
        
        Lifecycle describes actions that the management system should take in
        response to container lifecycle events. For the PostStart and PreStop
        lifecycle handlers, management of the container blocks until the action is
        complete, unless the container process fails, in which case the handler is
        aborted.
        
        

        • postStart (Object) PostStart is called immediately after a container is created. If the
          handler fails, the container is terminated and restarted according to its
          restart policy. Other management of the container blocks until the hook
          completes. More info:
          https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
          
          LifecycleHandler defines a specific action that should be taken in a
          lifecycle hook. One and only one of the fields, except TCPSocket must be
          specified.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
            the backward compatibility. There are no validation of this field and
            lifecycle hooks will fail in runtime when tcp handler is specified.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
        • preStop (Object) PreStop is called immediately before a container is terminated due to an
          API request or management event such as liveness/startup probe failure,
          preemption, resource contention, etc. The handler is not called if the
          container crashes or exits. The Pod's termination grace period countdown
          begins before the PreStop hook is executed. Regardless of the outcome of
          the handler, the container will eventually terminate within the Pod's
          termination grace period (unless delayed by finalizers). Other management
          of the container blocks until the hook completes or until the termination
          grace period is reached. More info:
          https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
          
          LifecycleHandler defines a specific action that should be taken in a
          lifecycle hook. One and only one of the fields, except TCPSocket must be
          specified.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
            the backward compatibility. There are no validation of this field and
            lifecycle hooks will fail in runtime when tcp handler is specified.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
      • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
        probe fails. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
        must have a unique name (DNS_LABEL). Cannot be updated.
        
      • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
        system additional information about the network connections a container
        uses, but is primarily informational. Not specifying a port here DOES NOT
        prevent that port from being exposed. Any port which is listening on the
        default "0.0.0.0" address inside a container will be accessible from the
        network. Cannot be updated.
        
        ContainerPort represents a network port in a single container.
        
        

        • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
          number, 0 ( x ( 65536.
          
        • hostIP (string) What host IP to bind the external port to.
          
        • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
          port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
          ContainerPort. Most containers do not need this.
          
        • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
          named port in a pod must have a unique name. Name for the port that can be
          referred to by services.
          
        • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
          
          
      • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
        from service endpoints if the probe fails. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
        
        ResourceRequirements describes the compute resource requirements.
        
        

        • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
          info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
          Requests is omitted for a container, it defaults to Limits if that is
          explicitly specified, otherwise to an implementation-defined value. More
          info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
      • securityContext (Object) SecurityContext defines the security options the container should be run
        with. If set, the fields of SecurityContext override the equivalent fields
        of PodSecurityContext. More info:
        https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
        
        SecurityContext holds security configuration that will be applied to a
        container. Some fields are present in both SecurityContext and
        PodSecurityContext. When both are set, the values in SecurityContext take
        precedence.
        
        

        • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
          privileges than its parent process. This bool directly controls if the
          no_new_privs flag will be set on the container process.
          AllowPrivilegeEscalation is true always when the container is: 1) run as
          Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
          spec.os.name is windows.
          
        • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
          default set of capabilities granted by the container runtime. Note that
          this field cannot be set when spec.os.name is windows.
          
          Adds and removes POSIX capabilities from running containers.
          
          

          • add ([]string) Added capabilities
            
          • drop ([]string) Removed capabilities
            
        • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
          essentially equivalent to root on the host. Defaults to false. Note that
          this field cannot be set when spec.os.name is windows.
          
        • procMount (string) procMount denotes the type of proc mount to use for the containers. The
          default is DefaultProcMount which uses the container runtime defaults for
          readonly paths and masked paths. This requires the ProcMountType feature
          flag to be enabled. Note that this field cannot be set when spec.os.name is
          windows.
          
        • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
          Note that this field cannot be set when spec.os.name is windows.
          
        • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
          default if unset. May also be set in PodSecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is windows.
          
        • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
          Kubelet will validate the image at runtime to ensure that it does not run
          as UID 0 (root) and fail to start the container if it does. If unset or
          false, no such validation will be performed. May also be set in
          PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
          the value specified in SecurityContext takes precedence.
          
        • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
          specified in image metadata if unspecified. May also be set in
          PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
          the value specified in SecurityContext takes precedence. Note that this
          field cannot be set when spec.os.name is windows.
          
        • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
          container runtime will allocate a random SELinux context for each
          container. May also be set in PodSecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is windows.
          
          SELinuxOptions are the labels to be applied to the container
          
          

          • level (string) Level is SELinux level label that applies to the container.
            
          • role (string) Role is a SELinux role label that applies to the container.
            
          • type (string) Type is a SELinux type label that applies to the container.
            
          • user (string) User is a SELinux user label that applies to the container.
            
        • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
          provided at both the pod & container level, the container options override
          the pod options. Note that this field cannot be set when spec.os.name is
          windows.
          
          SeccompProfile defines a pod/container's seccomp profile settings. Only one
          profile source may be set.
          
          

          • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
            be used. The profile must be preconfigured on the node to work. Must be a
            descending path, relative to the kubelet's configured seccomp profile
            location. Must only be set if type is "Localhost".
            
          • type (string) type indicates which kind of seccomp profile will be applied. Valid options
            are:
            
            Localhost - a profile defined in a file on the node should be used.
            RuntimeDefault - the container runtime default profile should be used.
            Unconfined - no profile should be applied.
            
            
            
        • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
          the options from the PodSecurityContext will be used. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is linux.
          
          WindowsSecurityContextOptions contain Windows-specific options and
          credentials.
          
          

          • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
            (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
            the GMSA credential spec named by the GMSACredentialSpecName field.
            
          • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
            
          • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
            container. This field is alpha-level and will only be honored by components
            that enable the WindowsHostProcessContainers feature flag. Setting this
            field without the feature flag will result in errors when validating the
            Pod. All of a Pod's containers must have the same effective HostProcess
            value (it is not allowed to have a mix of HostProcess containers and
            non-HostProcess containers). In addition, if HostProcess is true then
            HostNetwork must also be set to true.
            
          • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
            Defaults to the user specified in image metadata if unspecified. May also
            be set in PodSecurityContext. If set in both SecurityContext and
            PodSecurityContext, the value specified in SecurityContext takes
            precedence.
            
      • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
        specified, no other probes are executed until this completes successfully.
        If this probe fails, the Pod will be restarted, just as if the
        livenessProbe failed. This can be used to provide different probe
        parameters at the beginning of a Pod's lifecycle, when it might take a long
        time to load data or warm a cache, than during steady-state operation. This
        cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
        runtime. If this is not set, reads from stdin in the container will always
        result in EOF. Default is false.
        
      • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
        been opened by a single attach. When stdin is true the stdin stream will
        remain open across multiple attach sessions. If stdinOnce is set to true,
        stdin is opened on container start, is empty until the first client
        attaches to stdin, and then remains open and accepts data until the client
        disconnects, at which time stdin is closed and remains closed until the
        container is restarted. If this flag is false, a container processes that
        reads from stdin will never receive an EOF. Default is false
        
      • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
        message will be written is mounted into the container's filesystem. Message
        written is intended to be brief final status, such as an assertion failure
        message. Will be truncated by the node if greater than 4096 bytes. The
        total message length across all containers will be limited to 12kb.
        Defaults to /dev/termination-log. Cannot be updated.
        
      • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
        contents of terminationMessagePath to populate the container status message
        on both success and failure. FallbackToLogsOnError will use the last chunk
        of container log output if the termination message file is empty and the
        container exited with an error. The log output is limited to 2048 bytes or
        80 lines, whichever is smaller. Defaults to File. Cannot be updated.
        
        
        
      • tty (boolean) Whether this container should allocate a TTY for itself, also requires
        'stdin' to be true. Default is false.
        
      • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
        
        volumeDevice describes a mapping of a raw block device within a container.
        
        

        • devicePath (string) devicePath is the path inside of the container that the device will be
          mapped to.
          
        • name (string) name must match the name of a persistentVolumeClaim in the pod
          
      • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
        
        VolumeMount describes a mounting of a Volume within a container.
        
        

        • mountPath (string) Path within the container at which the volume should be mounted. Must not
          contain ':'.
          
        • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
          container and the other way around. When not set, MountPropagationNone is
          used. This field is beta in 1.10.
          
        • name (string) This must match the Name of a Volume.
          
        • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
          Defaults to false.
          
        • subPath (string) Path within the volume from which the container's volume should be mounted.
          Defaults to "" (volume's root).
          
        • subPathExpr (string) Expanded path within the volume from which the container's volume should be
          mounted. Behaves similarly to SubPath but environment variable references
          $(VAR_NAME) are expanded using the container's environment. Defaults to ""
          (volume's root). SubPathExpr and SubPath are mutually exclusive.
          
      • workingDir (string) Container's working directory. If not specified, the container runtime's
        default will be used, which might be configured in the container image.
        Cannot be updated.
        
    • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
      merged to the generated DNS configuration based on DNSPolicy.
      
      PodDNSConfig defines the DNS parameters of a pod in addition to those
      generated from DNSPolicy.
      
      

      • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
        nameservers generated from DNSPolicy. Duplicated nameservers will be
        removed.
        
      • options ([]Object) A list of DNS resolver options. This will be merged with the base options
        generated from DNSPolicy. Duplicated entries will be removed. Resolution
        options given in Options will override those that appear in the base
        DNSPolicy.
        
        PodDNSConfigOption defines DNS resolver options of a pod.
        
        

        • name (string) Required.
          
        • value (string) (empty)
          
      • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
        the base search paths generated from DNSPolicy. Duplicated search paths
        will be removed.
        
    • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
      'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
      parameters given in DNSConfig will be merged with the policy selected with
      DNSPolicy. To have DNS options set along with hostNetwork, you have to
      specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
      
      
      
    • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
      injected into pod's environment variables, matching the syntax of Docker
      links. Optional: Defaults to true.
      
    • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
      run in an existing pod to perform user-initiated actions such as debugging.
      This list cannot be specified when creating a pod, and it cannot be
      modified by updating the pod spec. In order to add an ephemeral container
      to an existing pod, use the pod's ephemeralcontainers subresource. This
      field is beta-level and available on clusters that haven't disabled the
      EphemeralContainers feature gate.
      
      An EphemeralContainer is a temporary container that you may add to an
      existing Pod for user-initiated activities such as debugging. Ephemeral
      containers have no resource or scheduling guarantees, and they will not be
      restarted when they exit or when a Pod is removed or restarted. The kubelet
      may evict a Pod if an ephemeral container causes the Pod to exceed its
      resource allocation.
      
      To add an ephemeral container, use the ephemeralcontainers subresource of
      an existing Pod. Ephemeral containers may not be removed or restarted.
      
      This is a beta feature available on clusters that haven't disabled the
      EphemeralContainers feature gate.
      
      

      • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
        provided. Variable references $(VAR_NAME) are expanded using the
        container's environment. If a variable cannot be resolved, the reference in
        the input string will be unchanged. Double $$ are reduced to a single $,
        which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
        produce the string literal "$(VAR_NAME)". Escaped references will never be
        expanded, regardless of whether the variable exists or not. Cannot be
        updated. More info:
        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
        
      • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
        ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
        are expanded using the container's environment. If a variable cannot be
        resolved, the reference in the input string will be unchanged. Double $$
        are reduced to a single $, which allows for escaping the $(VAR_NAME)
        syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
        Escaped references will never be expanded, regardless of whether the
        variable exists or not. Cannot be updated. More info:
        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
        
      • env ([]Object) List of environment variables to set in the container. Cannot be updated.
        
        EnvVar represents an environment variable present in a Container.
        
        

        • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
          
        • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
          environment variables in the container and any service environment
          variables. If a variable cannot be resolved, the reference in the input
          string will be unchanged. Double $$ are reduced to a single $, which allows
          for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
          string literal "$(VAR_NAME)". Escaped references will never be expanded,
          regardless of whether the variable exists or not. Defaults to "".
          
        • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
          empty.
          
          EnvVarSource represents a source for the value of an EnvVar.
          
          

          • configMapKeyRef (Object) Selects a key of a ConfigMap.
            
            Selects a key from a ConfigMap.
            
            

            • key (string) The key to select.
              
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its key must be defined
              
          • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
            `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
            spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
            
            ObjectFieldSelector selects an APIVersioned field of an object.
            
            

            • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
              "v1".
              
            • fieldPath (string) Path of the field to select in the specified API version.
              
          • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
            (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
            requests.memory and requests.ephemeral-storage) are currently supported.
            
            ResourceFieldSelector represents container resources (cpu, memory) and
            their output format
            
            

            • containerName (string) Container name: required for volumes, optional for env vars
              
            • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • resource (string) Required: resource to select
              
          • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
            
            SecretKeySelector selects a key of a Secret.
            
            

            • key (string) The key of the secret to select from. Must be a valid secret key.
              
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret or its key must be defined
              
      • envFrom ([]Object) List of sources to populate environment variables in the container. The
        keys defined within a source must be a C_IDENTIFIER. All invalid keys will
        be reported as an event when the container is starting. When a key exists
        in multiple sources, the value associated with the last source will take
        precedence. Values defined by an Env with a duplicate key will take
        precedence. Cannot be updated.
        
        EnvFromSource represents the source of a set of ConfigMaps
        
        

        • configMapRef (Object) The ConfigMap to select from
          
          ConfigMapEnvSource selects a ConfigMap to populate the environment
          variables with.
          
          The contents of the target ConfigMap's Data field will represent the
          key-value pairs as environment variables.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the ConfigMap must be defined
            
        • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
          C_IDENTIFIER.
          
        • secretRef (Object) The Secret to select from
          
          SecretEnvSource selects a Secret to populate the environment variables
          with.
          
          The contents of the target Secret's Data field will represent the key-value
          pairs as environment variables.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the Secret must be defined
            
      • image (string) Docker image name. More info:
        https://kubernetes.io/docs/concepts/containers/images
        
      • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
        if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
        More info:
        https://kubernetes.io/docs/concepts/containers/images#updating-images
        
        
        
      • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
        
        Lifecycle describes actions that the management system should take in
        response to container lifecycle events. For the PostStart and PreStop
        lifecycle handlers, management of the container blocks until the action is
        complete, unless the container process fails, in which case the handler is
        aborted.
        
        

        • postStart (Object) PostStart is called immediately after a container is created. If the
          handler fails, the container is terminated and restarted according to its
          restart policy. Other management of the container blocks until the hook
          completes. More info:
          https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
          
          LifecycleHandler defines a specific action that should be taken in a
          lifecycle hook. One and only one of the fields, except TCPSocket must be
          specified.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
            the backward compatibility. There are no validation of this field and
            lifecycle hooks will fail in runtime when tcp handler is specified.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
        • preStop (Object) PreStop is called immediately before a container is terminated due to an
          API request or management event such as liveness/startup probe failure,
          preemption, resource contention, etc. The handler is not called if the
          container crashes or exits. The Pod's termination grace period countdown
          begins before the PreStop hook is executed. Regardless of the outcome of
          the handler, the container will eventually terminate within the Pod's
          termination grace period (unless delayed by finalizers). Other management
          of the container blocks until the hook completes or until the termination
          grace period is reached. More info:
          https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
          
          LifecycleHandler defines a specific action that should be taken in a
          lifecycle hook. One and only one of the fields, except TCPSocket must be
          specified.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
            the backward compatibility. There are no validation of this field and
            lifecycle hooks will fail in runtime when tcp handler is specified.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
      • livenessProbe (Object) Probes are not allowed for ephemeral containers.
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
        unique among all containers, init containers and ephemeral containers.
        
      • ports ([]Object) Ports are not allowed for ephemeral containers.
        
        ContainerPort represents a network port in a single container.
        
        

        • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
          number, 0 ( x ( 65536.
          
        • hostIP (string) What host IP to bind the external port to.
          
        • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
          port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
          ContainerPort. Most containers do not need this.
          
        • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
          named port in a pod must have a unique name. Name for the port that can be
          referred to by services.
          
        • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
          
          
      • readinessProbe (Object) Probes are not allowed for ephemeral containers.
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
        use spare resources already allocated to the pod.
        
        ResourceRequirements describes the compute resource requirements.
        
        

        • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
          info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
          Requests is omitted for a container, it defaults to Limits if that is
          explicitly specified, otherwise to an implementation-defined value. More
          info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
      • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
        container should be run with. If set, the fields of SecurityContext
        override the equivalent fields of PodSecurityContext.
        
        SecurityContext holds security configuration that will be applied to a
        container. Some fields are present in both SecurityContext and
        PodSecurityContext. When both are set, the values in SecurityContext take
        precedence.
        
        

        • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
          privileges than its parent process. This bool directly controls if the
          no_new_privs flag will be set on the container process.
          AllowPrivilegeEscalation is true always when the container is: 1) run as
          Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
          spec.os.name is windows.
          
        • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
          default set of capabilities granted by the container runtime. Note that
          this field cannot be set when spec.os.name is windows.
          
          Adds and removes POSIX capabilities from running containers.
          
          

          • add ([]string) Added capabilities
            
          • drop ([]string) Removed capabilities
            
        • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
          essentially equivalent to root on the host. Defaults to false. Note that
          this field cannot be set when spec.os.name is windows.
          
        • procMount (string) procMount denotes the type of proc mount to use for the containers. The
          default is DefaultProcMount which uses the container runtime defaults for
          readonly paths and masked paths. This requires the ProcMountType feature
          flag to be enabled. Note that this field cannot be set when spec.os.name is
          windows.
          
        • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
          Note that this field cannot be set when spec.os.name is windows.
          
        • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
          default if unset. May also be set in PodSecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is windows.
          
        • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
          Kubelet will validate the image at runtime to ensure that it does not run
          as UID 0 (root) and fail to start the container if it does. If unset or
          false, no such validation will be performed. May also be set in
          PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
          the value specified in SecurityContext takes precedence.
          
        • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
          specified in image metadata if unspecified. May also be set in
          PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
          the value specified in SecurityContext takes precedence. Note that this
          field cannot be set when spec.os.name is windows.
          
        • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
          container runtime will allocate a random SELinux context for each
          container. May also be set in PodSecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is windows.
          
          SELinuxOptions are the labels to be applied to the container
          
          

          • level (string) Level is SELinux level label that applies to the container.
            
          • role (string) Role is a SELinux role label that applies to the container.
            
          • type (string) Type is a SELinux type label that applies to the container.
            
          • user (string) User is a SELinux user label that applies to the container.
            
        • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
          provided at both the pod & container level, the container options override
          the pod options. Note that this field cannot be set when spec.os.name is
          windows.
          
          SeccompProfile defines a pod/container's seccomp profile settings. Only one
          profile source may be set.
          
          

          • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
            be used. The profile must be preconfigured on the node to work. Must be a
            descending path, relative to the kubelet's configured seccomp profile
            location. Must only be set if type is "Localhost".
            
          • type (string) type indicates which kind of seccomp profile will be applied. Valid options
            are:
            
            Localhost - a profile defined in a file on the node should be used.
            RuntimeDefault - the container runtime default profile should be used.
            Unconfined - no profile should be applied.
            
            
            
        • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
          the options from the PodSecurityContext will be used. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is linux.
          
          WindowsSecurityContextOptions contain Windows-specific options and
          credentials.
          
          

          • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
            (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
            the GMSA credential spec named by the GMSACredentialSpecName field.
            
          • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
            
          • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
            container. This field is alpha-level and will only be honored by components
            that enable the WindowsHostProcessContainers feature flag. Setting this
            field without the feature flag will result in errors when validating the
            Pod. All of a Pod's containers must have the same effective HostProcess
            value (it is not allowed to have a mix of HostProcess containers and
            non-HostProcess containers). In addition, if HostProcess is true then
            HostNetwork must also be set to true.
            
          • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
            Defaults to the user specified in image metadata if unspecified. May also
            be set in PodSecurityContext. If set in both SecurityContext and
            PodSecurityContext, the value specified in SecurityContext takes
            precedence.
            
      • startupProbe (Object) Probes are not allowed for ephemeral containers.
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
        runtime. If this is not set, reads from stdin in the container will always
        result in EOF. Default is false.
        
      • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
        been opened by a single attach. When stdin is true the stdin stream will
        remain open across multiple attach sessions. If stdinOnce is set to true,
        stdin is opened on container start, is empty until the first client
        attaches to stdin, and then remains open and accepts data until the client
        disconnects, at which time stdin is closed and remains closed until the
        container is restarted. If this flag is false, a container processes that
        reads from stdin will never receive an EOF. Default is false
        
      • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
        container targets. The ephemeral container will be run in the namespaces
        (IPC, PID, etc) of this container. If not set then the ephemeral container
        uses the namespaces configured in the Pod spec.
        
        The container runtime must implement support for this feature. If the
        runtime does not support namespace targeting then the result of setting
        this field is undefined.
        
      • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
        message will be written is mounted into the container's filesystem. Message
        written is intended to be brief final status, such as an assertion failure
        message. Will be truncated by the node if greater than 4096 bytes. The
        total message length across all containers will be limited to 12kb.
        Defaults to /dev/termination-log. Cannot be updated.
        
      • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
        contents of terminationMessagePath to populate the container status message
        on both success and failure. FallbackToLogsOnError will use the last chunk
        of container log output if the termination message file is empty and the
        container exited with an error. The log output is limited to 2048 bytes or
        80 lines, whichever is smaller. Defaults to File. Cannot be updated.
        
        
        
      • tty (boolean) Whether this container should allocate a TTY for itself, also requires
        'stdin' to be true. Default is false.
        
      • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
        
        volumeDevice describes a mapping of a raw block device within a container.
        
        

        • devicePath (string) devicePath is the path inside of the container that the device will be
          mapped to.
          
        • name (string) name must match the name of a persistentVolumeClaim in the pod
          
      • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
        not allowed for ephemeral containers. Cannot be updated.
        
        VolumeMount describes a mounting of a Volume within a container.
        
        

        • mountPath (string) Path within the container at which the volume should be mounted. Must not
          contain ':'.
          
        • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
          container and the other way around. When not set, MountPropagationNone is
          used. This field is beta in 1.10.
          
        • name (string) This must match the Name of a Volume.
          
        • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
          Defaults to false.
          
        • subPath (string) Path within the volume from which the container's volume should be mounted.
          Defaults to "" (volume's root).
          
        • subPathExpr (string) Expanded path within the volume from which the container's volume should be
          mounted. Behaves similarly to SubPath but environment variable references
          $(VAR_NAME) are expanded using the container's environment. Defaults to ""
          (volume's root). SubPathExpr and SubPath are mutually exclusive.
          
      • workingDir (string) Container's working directory. If not specified, the container runtime's
        default will be used, which might be configured in the container image.
        Cannot be updated.
        
    • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
      the pod's hosts file if specified. This is only valid for non-hostNetwork
      pods.
      
      HostAlias holds the mapping between IP and hostnames that will be injected
      as an entry in the pod's hosts file.
      
      

      • hostnames ([]string) Hostnames for the above IP address.
        
      • ip (string) IP address of the host file entry.
        
    • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
      
    • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
      If this option is set, the ports that will be used must be specified.
      Default to false.
      
    • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
      
    • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
      be set to a system-defined value.
      
    • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
      namespace to use for pulling any of the images used by this PodSpec. If
      specified, these secrets will be passed to individual puller
      implementations for them to use. For example, in the case of docker, only
      DockerConfig type secrets are honored. More info:
      https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
      
      LocalObjectReference contains enough information to let you locate the
      referenced object inside the same namespace.
      
      

      • name (string) Name of the referent. More info:
        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
        
    • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
      executed in order prior to containers being started. If any init container
      fails, the pod is considered to have failed and is handled according to its
      restartPolicy. The name for an init container or normal container must be
      unique among all containers. Init containers may not have Lifecycle
      actions, Readiness probes, Liveness probes, or Startup probes. The
      resourceRequirements of an init container are taken into account during
      scheduling by finding the highest request/limit for each resource type, and
      then using the max of of that value or the sum of the normal containers.
      Limits are applied to init containers in a similar fashion. Init containers
      cannot currently be added or removed. Cannot be updated. More info:
      https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
      
      A single application container that you want to run within a pod.
      
      

      • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
        provided. Variable references $(VAR_NAME) are expanded using the
        container's environment. If a variable cannot be resolved, the reference in
        the input string will be unchanged. Double $$ are reduced to a single $,
        which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
        produce the string literal "$(VAR_NAME)". Escaped references will never be
        expanded, regardless of whether the variable exists or not. Cannot be
        updated. More info:
        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
        
      • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
        ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
        are expanded using the container's environment. If a variable cannot be
        resolved, the reference in the input string will be unchanged. Double $$
        are reduced to a single $, which allows for escaping the $(VAR_NAME)
        syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
        Escaped references will never be expanded, regardless of whether the
        variable exists or not. Cannot be updated. More info:
        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
        
      • env ([]Object) List of environment variables to set in the container. Cannot be updated.
        
        EnvVar represents an environment variable present in a Container.
        
        

        • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
          
        • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
          environment variables in the container and any service environment
          variables. If a variable cannot be resolved, the reference in the input
          string will be unchanged. Double $$ are reduced to a single $, which allows
          for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
          string literal "$(VAR_NAME)". Escaped references will never be expanded,
          regardless of whether the variable exists or not. Defaults to "".
          
        • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
          empty.
          
          EnvVarSource represents a source for the value of an EnvVar.
          
          

          • configMapKeyRef (Object) Selects a key of a ConfigMap.
            
            Selects a key from a ConfigMap.
            
            

            • key (string) The key to select.
              
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its key must be defined
              
          • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
            `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
            spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
            
            ObjectFieldSelector selects an APIVersioned field of an object.
            
            

            • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
              "v1".
              
            • fieldPath (string) Path of the field to select in the specified API version.
              
          • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
            (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
            requests.memory and requests.ephemeral-storage) are currently supported.
            
            ResourceFieldSelector represents container resources (cpu, memory) and
            their output format
            
            

            • containerName (string) Container name: required for volumes, optional for env vars
              
            • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • resource (string) Required: resource to select
              
          • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
            
            SecretKeySelector selects a key of a Secret.
            
            

            • key (string) The key of the secret to select from. Must be a valid secret key.
              
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret or its key must be defined
              
      • envFrom ([]Object) List of sources to populate environment variables in the container. The
        keys defined within a source must be a C_IDENTIFIER. All invalid keys will
        be reported as an event when the container is starting. When a key exists
        in multiple sources, the value associated with the last source will take
        precedence. Values defined by an Env with a duplicate key will take
        precedence. Cannot be updated.
        
        EnvFromSource represents the source of a set of ConfigMaps
        
        

        • configMapRef (Object) The ConfigMap to select from
          
          ConfigMapEnvSource selects a ConfigMap to populate the environment
          variables with.
          
          The contents of the target ConfigMap's Data field will represent the
          key-value pairs as environment variables.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the ConfigMap must be defined
            
        • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
          C_IDENTIFIER.
          
        • secretRef (Object) The Secret to select from
          
          SecretEnvSource selects a Secret to populate the environment variables
          with.
          
          The contents of the target Secret's Data field will represent the key-value
          pairs as environment variables.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the Secret must be defined
            
      • image (string) Docker image name. More info:
        https://kubernetes.io/docs/concepts/containers/images This field is
        optional to allow higher level config management to default or override
        container images in workload controllers like Deployments and StatefulSets.
        
      • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
        if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
        More info:
        https://kubernetes.io/docs/concepts/containers/images#updating-images
        
        
        
      • lifecycle (Object) Actions that the management system should take in response to container
        lifecycle events. Cannot be updated.
        
        Lifecycle describes actions that the management system should take in
        response to container lifecycle events. For the PostStart and PreStop
        lifecycle handlers, management of the container blocks until the action is
        complete, unless the container process fails, in which case the handler is
        aborted.
        
        

        • postStart (Object) PostStart is called immediately after a container is created. If the
          handler fails, the container is terminated and restarted according to its
          restart policy. Other management of the container blocks until the hook
          completes. More info:
          https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
          
          LifecycleHandler defines a specific action that should be taken in a
          lifecycle hook. One and only one of the fields, except TCPSocket must be
          specified.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
            the backward compatibility. There are no validation of this field and
            lifecycle hooks will fail in runtime when tcp handler is specified.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
        • preStop (Object) PreStop is called immediately before a container is terminated due to an
          API request or management event such as liveness/startup probe failure,
          preemption, resource contention, etc. The handler is not called if the
          container crashes or exits. The Pod's termination grace period countdown
          begins before the PreStop hook is executed. Regardless of the outcome of
          the handler, the container will eventually terminate within the Pod's
          termination grace period (unless delayed by finalizers). Other management
          of the container blocks until the hook completes or until the termination
          grace period is reached. More info:
          https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
          
          LifecycleHandler defines a specific action that should be taken in a
          lifecycle hook. One and only one of the fields, except TCPSocket must be
          specified.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
            the backward compatibility. There are no validation of this field and
            lifecycle hooks will fail in runtime when tcp handler is specified.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
      • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
        probe fails. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
        must have a unique name (DNS_LABEL). Cannot be updated.
        
      • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
        system additional information about the network connections a container
        uses, but is primarily informational. Not specifying a port here DOES NOT
        prevent that port from being exposed. Any port which is listening on the
        default "0.0.0.0" address inside a container will be accessible from the
        network. Cannot be updated.
        
        ContainerPort represents a network port in a single container.
        
        

        • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
          number, 0 ( x ( 65536.
          
        • hostIP (string) What host IP to bind the external port to.
          
        • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
          port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
          ContainerPort. Most containers do not need this.
          
        • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
          named port in a pod must have a unique name. Name for the port that can be
          referred to by services.
          
        • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
          
          
      • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
        from service endpoints if the probe fails. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
        
        ResourceRequirements describes the compute resource requirements.
        
        

        • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
          info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
          Requests is omitted for a container, it defaults to Limits if that is
          explicitly specified, otherwise to an implementation-defined value. More
          info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
      • securityContext (Object) SecurityContext defines the security options the container should be run
        with. If set, the fields of SecurityContext override the equivalent fields
        of PodSecurityContext. More info:
        https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
        
        SecurityContext holds security configuration that will be applied to a
        container. Some fields are present in both SecurityContext and
        PodSecurityContext. When both are set, the values in SecurityContext take
        precedence.
        
        

        • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
          privileges than its parent process. This bool directly controls if the
          no_new_privs flag will be set on the container process.
          AllowPrivilegeEscalation is true always when the container is: 1) run as
          Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
          spec.os.name is windows.
          
        • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
          default set of capabilities granted by the container runtime. Note that
          this field cannot be set when spec.os.name is windows.
          
          Adds and removes POSIX capabilities from running containers.
          
          

          • add ([]string) Added capabilities
            
          • drop ([]string) Removed capabilities
            
        • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
          essentially equivalent to root on the host. Defaults to false. Note that
          this field cannot be set when spec.os.name is windows.
          
        • procMount (string) procMount denotes the type of proc mount to use for the containers. The
          default is DefaultProcMount which uses the container runtime defaults for
          readonly paths and masked paths. This requires the ProcMountType feature
          flag to be enabled. Note that this field cannot be set when spec.os.name is
          windows.
          
        • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
          Note that this field cannot be set when spec.os.name is windows.
          
        • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
          default if unset. May also be set in PodSecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is windows.
          
        • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
          Kubelet will validate the image at runtime to ensure that it does not run
          as UID 0 (root) and fail to start the container if it does. If unset or
          false, no such validation will be performed. May also be set in
          PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
          the value specified in SecurityContext takes precedence.
          
        • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
          specified in image metadata if unspecified. May also be set in
          PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
          the value specified in SecurityContext takes precedence. Note that this
          field cannot be set when spec.os.name is windows.
          
        • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
          container runtime will allocate a random SELinux context for each
          container. May also be set in PodSecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is windows.
          
          SELinuxOptions are the labels to be applied to the container
          
          

          • level (string) Level is SELinux level label that applies to the container.
            
          • role (string) Role is a SELinux role label that applies to the container.
            
          • type (string) Type is a SELinux type label that applies to the container.
            
          • user (string) User is a SELinux user label that applies to the container.
            
        • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
          provided at both the pod & container level, the container options override
          the pod options. Note that this field cannot be set when spec.os.name is
          windows.
          
          SeccompProfile defines a pod/container's seccomp profile settings. Only one
          profile source may be set.
          
          

          • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
            be used. The profile must be preconfigured on the node to work. Must be a
            descending path, relative to the kubelet's configured seccomp profile
            location. Must only be set if type is "Localhost".
            
          • type (string) type indicates which kind of seccomp profile will be applied. Valid options
            are:
            
            Localhost - a profile defined in a file on the node should be used.
            RuntimeDefault - the container runtime default profile should be used.
            Unconfined - no profile should be applied.
            
            
            
        • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
          the options from the PodSecurityContext will be used. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is linux.
          
          WindowsSecurityContextOptions contain Windows-specific options and
          credentials.
          
          

          • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
            (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
            the GMSA credential spec named by the GMSACredentialSpecName field.
            
          • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
            
          • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
            container. This field is alpha-level and will only be honored by components
            that enable the WindowsHostProcessContainers feature flag. Setting this
            field without the feature flag will result in errors when validating the
            Pod. All of a Pod's containers must have the same effective HostProcess
            value (it is not allowed to have a mix of HostProcess containers and
            non-HostProcess containers). In addition, if HostProcess is true then
            HostNetwork must also be set to true.
            
          • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
            Defaults to the user specified in image metadata if unspecified. May also
            be set in PodSecurityContext. If set in both SecurityContext and
            PodSecurityContext, the value specified in SecurityContext takes
            precedence.
            
      • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
        specified, no other probes are executed until this completes successfully.
        If this probe fails, the Pod will be restarted, just as if the
        livenessProbe failed. This can be used to provide different probe
        parameters at the beginning of a Pod's lifecycle, when it might take a long
        time to load data or warm a cache, than during steady-state operation. This
        cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
        
        Probe describes a health check to be performed against a container to
        determine whether it is alive or ready to receive traffic.
        
        

        • exec (Object) Exec specifies the action to take.
          
          ExecAction describes a "run in container" action.
          
          

          • command ([]string) Command is the command line to execute inside the container, the working
            directory for the command is root ('/') in the container's filesystem. The
            command is simply exec'd, it is not run inside a shell, so traditional
            shell instructions ('|', etc) won't work. To use a shell, you need to
            explicitly call out to that shell. Exit status of 0 is treated as
            live/healthy and non-zero is unhealthy.
            
        • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
          having succeeded. Defaults to 3. Minimum value is 1.
          
        • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
          requires enabling GRPCContainerProbe feature gate.
          
          

          • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
            
          • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
            (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
            
            If this is not specified, the default behavior is defined by gRPC.
            
        • httpGet (Object) HTTPGet specifies the http request to perform.
          
          HTTPGetAction describes an action based on HTTP Get requests.
          
          

          • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
            "Host" in httpHeaders instead.
            
          • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
            
            HTTPHeader describes a custom header to be used in HTTP probes
            
            

            • name (string) The header field name
              
            • value (string) The header field value
              
          • path (string) Path to access on the HTTP server.
            
          • port (string) Name or number of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
          • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
            
            
        • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
          are initiated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
        • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
          value is 1.
          
        • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
          after having failed. Defaults to 1. Must be 1 for liveness and startup.
          Minimum value is 1.
          
        • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
          
          TCPSocketAction describes an action based on opening a socket
          
          

          • host (string) Optional: Host name to connect to, defaults to the pod IP.
            
          • port (string) Number or name of the port to access on the container. Number must be in
            the range 1 to 65535. Name must be an IANA_SVC_NAME.
            
            IntOrString is a type that can hold an int32 or a string. When used in JSON
            or YAML marshalling and unmarshalling, it produces or consumes the inner
            type. This allows you to have, for example, a JSON field that can accept a
            name or number.
            
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
          probe failure. The grace period is the duration in seconds after the
          processes running in the pod are sent a termination signal and the time
          when the processes are forcibly halted with a kill signal. Set this value
          longer than the expected cleanup time for your process. If this value is
          nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
          value overrides the value provided by the pod spec. Value must be
          non-negative integer. The value zero indicates stop immediately via the
          kill signal (no opportunity to shut down). This is a beta field and
          requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
          is 1. spec.terminationGracePeriodSeconds is used if unset.
          
        • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
          Minimum value is 1. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
      • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
        runtime. If this is not set, reads from stdin in the container will always
        result in EOF. Default is false.
        
      • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
        been opened by a single attach. When stdin is true the stdin stream will
        remain open across multiple attach sessions. If stdinOnce is set to true,
        stdin is opened on container start, is empty until the first client
        attaches to stdin, and then remains open and accepts data until the client
        disconnects, at which time stdin is closed and remains closed until the
        container is restarted. If this flag is false, a container processes that
        reads from stdin will never receive an EOF. Default is false
        
      • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
        message will be written is mounted into the container's filesystem. Message
        written is intended to be brief final status, such as an assertion failure
        message. Will be truncated by the node if greater than 4096 bytes. The
        total message length across all containers will be limited to 12kb.
        Defaults to /dev/termination-log. Cannot be updated.
        
      • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
        contents of terminationMessagePath to populate the container status message
        on both success and failure. FallbackToLogsOnError will use the last chunk
        of container log output if the termination message file is empty and the
        container exited with an error. The log output is limited to 2048 bytes or
        80 lines, whichever is smaller. Defaults to File. Cannot be updated.
        
        
        
      • tty (boolean) Whether this container should allocate a TTY for itself, also requires
        'stdin' to be true. Default is false.
        
      • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
        
        volumeDevice describes a mapping of a raw block device within a container.
        
        

        • devicePath (string) devicePath is the path inside of the container that the device will be
          mapped to.
          
        • name (string) name must match the name of a persistentVolumeClaim in the pod
          
      • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
        
        VolumeMount describes a mounting of a Volume within a container.
        
        

        • mountPath (string) Path within the container at which the volume should be mounted. Must not
          contain ':'.
          
        • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
          container and the other way around. When not set, MountPropagationNone is
          used. This field is beta in 1.10.
          
        • name (string) This must match the Name of a Volume.
          
        • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
          Defaults to false.
          
        • subPath (string) Path within the volume from which the container's volume should be mounted.
          Defaults to "" (volume's root).
          
        • subPathExpr (string) Expanded path within the volume from which the container's volume should be
          mounted. Behaves similarly to SubPath but environment variable references
          $(VAR_NAME) are expanded using the container's environment. Defaults to ""
          (volume's root). SubPathExpr and SubPath are mutually exclusive.
          
      • workingDir (string) Container's working directory. If not specified, the container runtime's
        default will be used, which might be configured in the container image.
        Cannot be updated.
        
    • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
      non-empty, the scheduler simply schedules this pod onto that node, assuming
      that it fits resource requirements.
      
    • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
      Selector which must match a node's labels for the pod to be scheduled on
      that node. More info:
      https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
      
    • os (Object) Specifies the OS of the containers in the pod. Some pod and container
      fields are restricted if this is set.
      
      If the OS field is set to linux, the following fields must be unset:
      -securityContext.windowsOptions
      
      If the OS field is set to windows, following fields must be unset: -
      spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
      spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
      spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
      spec.shareProcessNamespace - spec.securityContext.runAsUser -
      spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
      spec.containers[*].securityContext.seLinuxOptions -
      spec.containers[*].securityContext.seccompProfile -
      spec.containers[*].securityContext.capabilities -
      spec.containers[*].securityContext.readOnlyRootFilesystem -
      spec.containers[*].securityContext.privileged -
      spec.containers[*].securityContext.allowPrivilegeEscalation -
      spec.containers[*].securityContext.procMount -
      spec.containers[*].securityContext.runAsUser -
      spec.containers[*].securityContext.runAsGroup This is an alpha field and
      requires the IdentifyPodOS feature
      
      PodOS defines the OS parameters of a pod.
      
      

      • name (string) Name is the name of the operating system. The currently supported values
        are linux and windows. Additional value may be defined in future and can be
        one of:
        https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
        Clients should expect to handle additional values and treat unrecognized
        values in this field as os: null
        
    • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
      a given RuntimeClass. This field will be autopopulated at admission time by
      the RuntimeClass admission controller. If the RuntimeClass admission
      controller is enabled, overhead must not be set in Pod create requests. The
      RuntimeClass admission controller will reject Pod create requests which
      have the overhead already set. If RuntimeClass is configured and selected
      in the PodSpec, Overhead will be set to the value defined in the
      corresponding RuntimeClass, otherwise it will remain unset and treated as
      zero. More info:
      https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
      This field is beta-level as of Kubernetes v1.18, and is only honored by
      servers that enable the PodOverhead feature.
      
      Quantity is a fixed-point representation of a number. It provides
      convenient marshaling/unmarshaling in JSON and YAML, in addition to
      String() and AsInt64() accessors.
      
      The serialization format is:
      
      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
      (signedNumber)
      
      No matter which of the three exponent forms is used, no quantity may
      represent a number greater than 2^63-1 in magnitude, nor may it have more
      than 3 decimal places. Numbers larger or more precise will be capped or
      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
      future if we require larger or smaller quantities.
      
      When a Quantity is parsed from a string, it will remember the type of
      suffix it had, and will use the same type again when it is serialized.
      
      Before serializing, Quantity will be put in "canonical form". This means
      that Exponent/suffix will be adjusted up or down (with a corresponding
      increase or decrease in Mantissa) such that:
      a. No precision is lost b. No fractional digits will be emitted c. The
      exponent (or suffix) is as large as possible. The sign will be omitted
      unless the number is negative.
      
      Examples:
      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
      
      Note that the quantity will NEVER be internally represented by a floating
      point number. That is the whole point of this exercise.
      
      Non-canonical values will still parse as long as they are well formed, but
      will be re-emitted in their canonical form. (So always use canonical form,
      or don't diff.)
      
      This format is intended to make it difficult to use these numbers without
      writing some sort of special handling code in the hopes that that will
      cause implementors to also use a fixed point implementation.
      
    • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
      of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
      This field is beta-level, gated by the NonPreemptingPriority feature-gate.
      
    • priority (integer) The priority value. Various system components use this field to find the
      priority of the pod. When Priority Admission Controller is enabled, it
      prevents users from setting this field. The admission controller populates
      this field from PriorityClassName. The higher the value, the higher the
      priority.
      
    • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
      "system-cluster-critical" are two special keywords which indicate the
      highest priorities with the former being the highest priority. Any other
      name must be defined by creating a PriorityClass object with that name. If
      not specified, the pod priority will be default or zero if there is no
      default.
      
    • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
      pod is ready when all its containers are ready AND all conditions specified
      in the readiness gates have status equal to "True" More info:
      https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
      
      PodReadinessGate contains the reference to a pod condition
      
      

      • conditionType (string) ConditionType refers to a condition in the pod's condition list with
        matching type.
        
        
        
    • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
      Never. Default to Always. More info:
      https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
      
      
      
    • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
      which should be used to run this pod. If no RuntimeClass resource matches
      the named class, the pod will not be run. If unset or empty, the "legacy"
      RuntimeClass will be used, which is an implicit class with an empty
      definition that uses the default runtime handler. More info:
      https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
      beta feature as of Kubernetes v1.14.
      
    • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
      specified, the pod will be dispatched by default scheduler.
      
    • securityContext (Object) SecurityContext holds pod-level security attributes and common container
      settings. Optional: Defaults to empty. See type description for default
      values of each field.
      
      PodSecurityContext holds pod-level security attributes and common container
      settings. Some fields are also present in container.securityContext. Field
      values of container.securityContext take precedence over field values of
      PodSecurityContext.
      
      

      • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
        volume types allow the Kubelet to change the ownership of that volume to be
        owned by the pod:
        
        1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
        created in the volume will be owned by FSGroup) 3. The permission bits are
        OR'd with rw-rw----
        
        If unset, the Kubelet will not modify the ownership and permissions of any
        volume. Note that this field cannot be set when spec.os.name is windows.
        
      • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
        of the volume before being exposed inside Pod. This field will only apply
        to volume types which support fsGroup based ownership(and permissions). It
        will have no effect on ephemeral volume types such as: secret, configmaps
        and emptydir. Valid values are "OnRootMismatch" and "Always". If not
        specified, "Always" is used. Note that this field cannot be set when
        spec.os.name is windows.
        
      • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
        default if unset. May also be set in SecurityContext. If set in both
        SecurityContext and PodSecurityContext, the value specified in
        SecurityContext takes precedence for that container. Note that this field
        cannot be set when spec.os.name is windows.
        
      • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
        Kubelet will validate the image at runtime to ensure that it does not run
        as UID 0 (root) and fail to start the container if it does. If unset or
        false, no such validation will be performed. May also be set in
        SecurityContext. If set in both SecurityContext and PodSecurityContext, the
        value specified in SecurityContext takes precedence.
        
      • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
        specified in image metadata if unspecified. May also be set in
        SecurityContext. If set in both SecurityContext and PodSecurityContext, the
        value specified in SecurityContext takes precedence for that container.
        Note that this field cannot be set when spec.os.name is windows.
        
      • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
        container runtime will allocate a random SELinux context for each
        container. May also be set in SecurityContext. If set in both
        SecurityContext and PodSecurityContext, the value specified in
        SecurityContext takes precedence for that container. Note that this field
        cannot be set when spec.os.name is windows.
        
        SELinuxOptions are the labels to be applied to the container
        
        

        • level (string) Level is SELinux level label that applies to the container.
          
        • role (string) Role is a SELinux role label that applies to the container.
          
        • type (string) Type is a SELinux type label that applies to the container.
          
        • user (string) User is a SELinux user label that applies to the container.
          
      • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
        field cannot be set when spec.os.name is windows.
        
        SeccompProfile defines a pod/container's seccomp profile settings. Only one
        profile source may be set.
        
        

        • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
          be used. The profile must be preconfigured on the node to work. Must be a
          descending path, relative to the kubelet's configured seccomp profile
          location. Must only be set if type is "Localhost".
          
        • type (string) type indicates which kind of seccomp profile will be applied. Valid options
          are:
          
          Localhost - a profile defined in a file on the node should be used.
          RuntimeDefault - the container runtime default profile should be used.
          Unconfined - no profile should be applied.
          
          
          
      • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
        addition to the container's primary GID. If unspecified, no groups will be
        added to any container. Note that this field cannot be set when
        spec.os.name is windows.
        
      • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
        unsupported sysctls (by the container runtime) might fail to launch. Note
        that this field cannot be set when spec.os.name is windows.
        
        Sysctl defines a kernel parameter to be set
        
        

        • name (string) Name of a property to set
          
        • value (string) Value of a property to set
          
      • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
        the options within a container's SecurityContext will be used. If set in
        both SecurityContext and PodSecurityContext, the value specified in
        SecurityContext takes precedence. Note that this field cannot be set when
        spec.os.name is linux.
        
        WindowsSecurityContextOptions contain Windows-specific options and
        credentials.
        
        

        • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
          (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
          the GMSA credential spec named by the GMSACredentialSpecName field.
          
        • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
          
        • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
          container. This field is alpha-level and will only be honored by components
          that enable the WindowsHostProcessContainers feature flag. Setting this
          field without the feature flag will result in errors when validating the
          Pod. All of a Pod's containers must have the same effective HostProcess
          value (it is not allowed to have a mix of HostProcess containers and
          non-HostProcess containers). In addition, if HostProcess is true then
          HostNetwork must also be set to true.
          
        • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
          Defaults to the user specified in image metadata if unspecified. May also
          be set in PodSecurityContext. If set in both SecurityContext and
          PodSecurityContext, the value specified in SecurityContext takes
          precedence.
          
    • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
      Deprecated: Use serviceAccountName instead.
      
    • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
      pod. More info:
      https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
      
    • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
      than the leaf name (the default). In Linux containers, this means setting
      the FQDN in the hostname field of the kernel (the nodename field of struct
      utsname). In Windows containers, this means setting the registry value of
      hostname for the registry key
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
      FQDN. If a pod does not have FQDN, this has no effect. Default to false.
      
    • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
      When this is set containers will be able to view and signal processes from
      other containers in the same pod, and the first process in each container
      will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
      be set. Optional: Default to false.
      
    • subdomain (string) If specified, the fully qualified Pod hostname will be
      "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
      specified, the pod will not have a domainname at all.
      
    • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
      decreased in delete request. Value must be non-negative integer. The value
      zero indicates stop immediately via the kill signal (no opportunity to shut
      down). If this value is nil, the default grace period will be used instead.
      The grace period is the duration in seconds after the processes running in
      the pod are sent a termination signal and the time when the processes are
      forcibly halted with a kill signal. Set this value longer than the expected
      cleanup time for your process. Defaults to 30 seconds.
      
    • tolerations ([]Object) If specified, the pod's tolerations.
      
      The pod this Toleration is attached to tolerates any taint that matches the
      triple (key,value,effect) using the matching operator (operator).
      
      

      • effect (string) Effect indicates the taint effect to match. Empty means match all taint
        effects. When specified, allowed values are NoSchedule, PreferNoSchedule
        and NoExecute.
        
        
        
      • key (string) Key is the taint key that the toleration applies to. Empty means match all
        taint keys. If the key is empty, operator must be Exists; this combination
        means to match all values and all keys.
        
      • operator (string) Operator represents a key's relationship to the value. Valid operators are
        Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
        value, so that a pod can tolerate all taints of a particular category.
        
        
        
      • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
        be of effect NoExecute, otherwise this field is ignored) tolerates the
        taint. By default, it is not set, which means tolerate the taint forever
        (do not evict). Zero and negative values will be treated as 0 (evict
        immediately) by the system.
        
      • value (string) Value is the taint value the toleration matches to. If the operator is
        Exists, the value should be empty, otherwise just a regular string.
        
    • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
      across topology domains. Scheduler will schedule pods in a way which abides
      by the constraints. All topologySpreadConstraints are ANDed.
      
      TopologySpreadConstraint specifies how to spread matching pods among the
      given topology.
      
      

      • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
        selector are counted to determine the number of pods in their corresponding
        topology domain.
        
        A label selector is a label query over a set of resources. The result of
        matchLabels and matchExpressions are ANDed. An empty label selector matches
        all objects. A null label selector matches no objects.
        
        

        • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
          are ANDed.
          
          A label selector requirement is a selector that contains values, a key, and
          an operator that relates the key and values.
          
          

          • key (string) key is the label key that the selector applies to.
            
          • operator (string) operator represents a key's relationship to a set of values. Valid
            operators are In, NotIn, Exists and DoesNotExist.
            
          • values ([]string) values is an array of string values. If the operator is In or NotIn, the
            values array must be non-empty. If the operator is Exists or DoesNotExist,
            the values array must be empty. This array is replaced during a strategic
            merge patch.
            
        • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
          matchLabels map is equivalent to an element of matchExpressions, whose key
          field is "key", the operator is "In", and the values array contains only
          "value". The requirements are ANDed.
          
      • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
        When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
        difference between the number of matching pods in the target topology and
        the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
        and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
        zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
        to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
        ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
        incoming pod can be scheduled onto any zone. When
        `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
        topologies that satisfy it. It's a required field. Default value is 1 and 0
        is not allowed.
        
      • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
        key and identical values are considered to be in the same topology. We
        consider each (key, value) as a "bucket", and try to put balanced number of
        pods into each bucket. It's a required field.
        
      • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
        the spread constraint. - DoNotSchedule (default) tells the scheduler not to
        schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
        any location, but giving higher precedence to topologies that would help
        reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
        pod if and only if every possible node assignment for that pod would
        violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
        MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
        | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
        DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
        3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
        other words, the cluster can still be imbalanced, but scheduler won't make
        it *more* imbalanced. It's a required field.
        
        
        
    • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
      More info: https://kubernetes.io/docs/concepts/storage/volumes
      
      Volume represents a named volume in a pod that may be accessed by any
      container in the pod.
      
      

      • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
        kubelet's host machine and then exposed to the pod. More info:
        https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
        
        Represents a Persistent Disk resource in AWS.
        An AWS EBS disk must exist before mounting to a container. The disk must
        also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
        mounted as read/write once. AWS EBS volumes support ownership management
        and SELinux relabeling.
        
        

        • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
          filesystem type is supported by the host operating system. Examples:
          "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
          More info:
          https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
          
        • partition (integer) The partition in the volume that you want to mount. If omitted, the default
          is to mount by volume name. Examples: For volume /dev/sda1, you specify the
          partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
          you can leave the property empty).
          
        • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
          "true". If omitted, the default is "false". More info:
          https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
          
        • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
          info:
          https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
          
      • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
        the pod.
        
        AzureDisk represents an Azure Data Disk mount on the host and bind mount to
        the pod.
        
        

        • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
          
        • diskName (string) The Name of the data disk in the blob storage
          
        • diskURI (string) The URI the data disk in the blob storage
          
        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
          "ext4" if unspecified.
          
        • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
          single blob disk per storage account Managed: azure managed data disk (only
          in managed availability set). defaults to shared
          
        • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
          setting in VolumeMounts.
          
      • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
        to the pod.
        
        AzureFile represents an Azure File Service mount on the host and bind mount
        to the pod.
        
        

        • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
          setting in VolumeMounts.
          
        • secretName (string) the name of secret that contains Azure Storage Account Name and Key
          
        • shareName (string) Share Name
          
      • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
        
        Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
        volumes do not support ownership management or SELinux relabeling.
        
        

        • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
          https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
          
        • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
          is /
          
        • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
          ReadOnly setting in VolumeMounts. More info:
          https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
          
        • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
          /etc/ceph/user.secret More info:
          https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
          
        • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
          default is empty. More info:
          https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • user (string) Optional: User is the rados user name, default is admin More info:
          https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
          
      • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
        machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
        
        Represents a cinder volume resource in Openstack. A Cinder volume must
        exist before mounting to a container. The volume must also be in the same
        region as the kubelet. Cinder volumes support ownership management and
        SELinux relabeling.
        
        

        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
          be "ext4" if unspecified. More info:
          https://examples.k8s.io/mysql-cinder-pd/README.md
          
        • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
          ReadOnly setting in VolumeMounts. More info:
          https://examples.k8s.io/mysql-cinder-pd/README.md
          
        • secretRef (Object) Optional: points to a secret object containing parameters used to connect
          to OpenStack.
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • volumeID (string) volume id used to identify the volume in cinder. More info:
          https://examples.k8s.io/mysql-cinder-pd/README.md
          
      • configMap (Object) ConfigMap represents a configMap that should populate this volume
        
        Adapts a ConfigMap into a volume.
        The contents of the target ConfigMap's Data field will be presented in a
        volume as files using the keys in the Data field as the file names, unless
        the items element is populated with specific mappings of keys to paths.
        ConfigMap volumes support ownership management and SELinux relabeling.
        
        

        • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
          Must be an octal value between 0000 and 0777 or a decimal value between 0
          and 511. YAML accepts both octal and decimal values, JSON requires decimal
          values for mode bits. Defaults to 0644. Directories within the path are not
          affected by this setting. This might be in conflict with other options that
          affect the file mode, like fsGroup, and the result can be other mode bits
          set.
          
        • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
          ConfigMap will be projected into the volume as a file whose name is the key
          and content is the value. If specified, the listed keys will be projected
          into the specified paths, and unlisted keys will not be present. If a key
          is specified which is not present in the ConfigMap, the volume setup will
          error unless it is marked optional. Paths must be relative and may not
          contain the '..' path or start with '..'.
          
          Maps a string key to a path within a volume.
          
          

          • key (string) The key to project.
            
          • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
            value between 0000 and 0777 or a decimal value between 0 and 511. YAML
            accepts both octal and decimal values, JSON requires decimal values for
            mode bits. If not specified, the volume defaultMode will be used. This
            might be in conflict with other options that affect the file mode, like
            fsGroup, and the result can be other mode bits set.
            
          • path (string) The relative path of the file to map the key to. May not be an absolute
            path. May not contain the path element '..'. May not start with the string
            '..'.
            
        • name (string) Name of the referent. More info:
          https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
          
        • optional (boolean) Specify whether the ConfigMap or its keys must be defined
          
      • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
        handled by certain external CSI drivers (Beta feature).
        
        Represents a source location of a volume to mount, managed by an external
        CSI driver
        
        

        • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
          your admin for the correct name as registered in the cluster.
          
        • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
          empty value is passed to the associated CSI driver which will determine the
          default filesystem to apply.
          
        • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
          sensitive information to pass to the CSI driver to complete the CSI
          NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
          and may be empty if no secret is required. If the secret object contains
          more than one secret, all secret references are passed.
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
          (read/write).
          
        • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
          CSI driver. Consult your driver's documentation for supported values.
          
      • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
        volume
        
        DownwardAPIVolumeSource represents a volume containing downward API info.
        Downward API volumes support ownership management and SELinux relabeling.
        
        

        • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
          mode bits used to set permissions on created files by default. Must be an
          octal value between 0000 and 0777 or a decimal value between 0 and 511.
          YAML accepts both octal and decimal values, JSON requires decimal values
          for mode bits. Defaults to 0644. Directories within the path are not
          affected by this setting. This might be in conflict with other options that
          affect the file mode, like fsGroup, and the result can be other mode bits
          set.
          
        • items ([]Object) Items is a list of downward API volume file
          
          DownwardAPIVolumeFile represents information to create the file containing
          the pod field
          
          

          • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
            namespace are supported.
            
            ObjectFieldSelector selects an APIVersioned field of an object.
            
            

            • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
              "v1".
              
            • fieldPath (string) Path of the field to select in the specified API version.
              
          • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
            value between 0000 and 0777 or a decimal value between 0 and 511. YAML
            accepts both octal and decimal values, JSON requires decimal values for
            mode bits. If not specified, the volume defaultMode will be used. This
            might be in conflict with other options that affect the file mode, like
            fsGroup, and the result can be other mode bits set.
            
          • path (string) Required: Path is the relative path name of the file to be created. Must
            not be absolute or contain the '..' path. Must be utf-8 encoded. The first
            item of the relative path must not start with '..'
            
          • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
            (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
            supported.
            
            ResourceFieldSelector represents container resources (cpu, memory) and
            their output format
            
            

            • containerName (string) Container name: required for volumes, optional for env vars
              
            • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • resource (string) Required: resource to select
              
      • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
        More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
        
        Represents an empty directory for a pod. Empty directory volumes support
        ownership management and SELinux relabeling.
        
        

        • medium (string) What type of storage medium should back this directory. The default is ""
          which means to use the node's default medium. Must be an empty string
          (default) or Memory. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#emptydir
          
        • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
          limit is also applicable for memory medium. The maximum usage on memory
          medium EmptyDir would be the minimum value between the SizeLimit specified
          here and the sum of memory limits of all containers in a pod. The default
          is nil which means that the limit is undefined. More info:
          http://kubernetes.io/docs/user-guide/volumes#emptydir
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
      • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
        The volume's lifecycle is tied to the pod that defines it - it will be
        created before the pod starts, and deleted when the pod is removed.
        
        Use this if: a) the volume is only needed while the pod runs, b) features
        of normal volumes like restoring from snapshot or capacity tracking are
        needed, c) the storage driver is specified through a storage class, and d)
        the storage driver supports dynamic volume provisioning through a
        PersistentVolumeClaim (see EphemeralVolumeSource for more information on
        the connection between this volume type and PersistentVolumeClaim).
        
        Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
        that persist for longer than the lifecycle of an individual pod.
        
        Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
        to be used that way - see the documentation of the driver for more
        information.
        
        A pod can use both types of ephemeral volumes and persistent volumes at the
        same time.
        
        Represents an ephemeral volume that is handled by a normal storage driver.
        
        

        • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
          in which this EphemeralVolumeSource is embedded will be the owner of the
          PVC, i.e. the PVC will be deleted together with the pod. The name of the
          PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
          from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
          if the concatenated name is not valid for a PVC (for example, too long).
          
          An existing PVC with that name that is not owned by the pod will *not* be
          used for the pod to avoid using an unrelated volume by mistake. Starting
          the pod is then blocked until the unrelated PVC is removed. If such a
          pre-created PVC is meant to be used by the pod, the PVC has to updated with
          an owner reference to the pod once the pod exists. Normally this should not
          be necessary, but it may be useful when manually reconstructing a broken
          cluster.
          
          This field is read-only and no changes will be made by Kubernetes to the
          PVC after it has been created.
          
          Required, must not be nil.
          
          PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
          objects as part of an EphemeralVolumeSource.
          
          

          • metadata (Object) May contain labels and annotations that will be copied into the PVC when
            creating it. No other fields are allowed and will be rejected during
            validation.
            
            ObjectMeta is metadata that all persisted resources must have, which
            includes all objects users must create.
            
            

            • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
              may be set by external tools to store and retrieve arbitrary metadata. They
              are not queryable and should be preserved when modifying objects. More
              info: http://kubernetes.io/docs/user-guide/annotations
              
            • clusterName (string) The name of the cluster which the object belongs to. This is used to
              distinguish resources with same name and namespace in different clusters.
              This field is not set anywhere right now and apiserver is going to ignore
              it if set in create or update request.
              
            • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
              object was created. It is not guaranteed to be set in happens-before order
              across separate operations. Clients may not set this value. It is
              represented in RFC3339 form and is in UTC.
              
              Populated by the system. Read-only. Null for lists. More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
              
              Time is a wrapper around time.Time which supports correct marshaling to
              YAML and JSON. Wrappers are provided for many of the factory methods that
              the time package offers.
              
            • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
              will be removed from the system. Only set when deletionTimestamp is also
              set. May only be shortened. Read-only.
              
            • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
              deleted. This field is set by the server when a graceful deletion is
              requested by the user, and is not directly settable by a client. The
              resource is expected to be deleted (no longer visible from resource lists,
              and not reachable by name) after the time in this field, once the
              finalizers list is empty. As long as the finalizers list contains items,
              deletion is blocked. Once the deletionTimestamp is set, this value may not
              be unset or be set further into the future, although it may be shortened or
              the resource may be deleted prior to this time. For example, a user may
              request that a pod is deleted in 30 seconds. The Kubelet will react by
              sending a graceful termination signal to the containers in the pod. After
              that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
              to the container and after cleanup, remove the pod from the API. In the
              presence of network partitions, this object may still exist after this
              timestamp, until an administrator or automated process can determine the
              resource is fully terminated. If not set, graceful deletion of the object
              has not been requested.
              
              Populated by the system when a graceful deletion is requested. Read-only.
              More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
              
              Time is a wrapper around time.Time which supports correct marshaling to
              YAML and JSON. Wrappers are provided for many of the factory methods that
              the time package offers.
              
            • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
              an identifier for the responsible component that will remove the entry from
              the list. If the deletionTimestamp of the object is non-nil, entries in
              this list can only be removed. Finalizers may be processed and removed in
              any order. Order is NOT enforced because it introduces significant risk of
              stuck finalizers. finalizers is a shared field, any actor with permission
              can reorder it. If the finalizer list is processed in order, then this can
              lead to a situation in which the component responsible for the first
              finalizer in the list is waiting for a signal (field value, external
              system, or other) produced by a component responsible for a finalizer later
              in the list, resulting in a deadlock. Without enforced ordering finalizers
              are free to order amongst themselves and are not vulnerable to ordering
              changes in the list.
              
            • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
              unique name ONLY IF the Name field has not been provided. If this field is
              used, the name returned to the client will be different than the name
              passed. This value will also be combined with a unique suffix. The provided
              value has the same validation rules as the Name field, and may be truncated
              by the length of the suffix required to make the value unique on the
              server.
              
              If this field is specified and the generated name exists, the server will
              NOT return a 409 - instead, it will either return 201 Created or 500 with
              Reason ServerTimeout indicating a unique name could not be found in the
              time allotted, and the client should retry (optionally after the time
              indicated in the Retry-After header).
              
              Applied only if Name is not specified. More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
              
            • generation (integer) A sequence number representing a specific generation of the desired state.
              Populated by the system. Read-only.
              
            • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
              (scope and select) objects. May match selectors of replication controllers
              and services. More info: http://kubernetes.io/docs/user-guide/labels
              
            • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
              managed by that workflow. This is mostly for internal housekeeping, and
              users typically shouldn't need to set or understand this field. A workflow
              can be the user's name, a controller's name, or the name of a specific
              apply path like "ci-cd". The set of fields is always in the version that
              the workflow used when modifying the object.
              
              ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
              the resource that the fieldset applies to.
              
              

              • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                to. The format is "group/version" just like the top-level APIVersion field.
                It is necessary to track the version of a field set because it cannot be
                automatically converted.
                
              • fieldsType (string) FieldsType is the discriminator for the different fields format and
                version. There is currently only one possible value: "FieldsV1"
                
              • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                type.
                
                FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                format.
                
                Each key is either a '.' representing the field itself, and will always map
                to an empty set, or a string representing a sub-field or item. The string
                will follow one of these four formats: 'f:(name)', where (name) is the name
                of a field in a struct, or key in a map 'v:(value)', where (value) is the
                exact json formatted value of a list item 'i:(index)', where (index) is
                position of a item in a list 'k:(keys)', where (keys) is a map of a list
                item's key fields to their unique values If a key maps to an empty Fields
                value, the field that key represents is part of the set.
                
                The exact format is defined in sigs.k8s.io/structured-merge-diff
                
                FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                format.
                
                Each key is either a '.' representing the field itself, and will always map
                to an empty set, or a string representing a sub-field or item. The string
                will follow one of these four formats: 'f:(name)', where (name) is the name
                of a field in a struct, or key in a map 'v:(value)', where (value) is the
                exact json formatted value of a list item 'i:(index)', where (index) is
                position of a item in a list 'k:(keys)', where (keys) is a map of a list
                item's key fields to their unique values If a key maps to an empty Fields
                value, the field that key represents is part of the set.
                
                The exact format is defined in sigs.k8s.io/structured-merge-diff
                
              • manager (string) Manager is an identifier of the workflow managing these fields.
                
              • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                being created. The only valid values for this field are 'Apply' and
                'Update'.
                
              • subresource (string) Subresource is the name of the subresource used to update that object, or
                empty string if the object was updated through the main resource. The value
                of this field is used to distinguish between managers, even if they share
                the same name. For example, a status update will be distinct from a regular
                update using the same manager name. Note that the APIVersion field is not
                related to the Subresource field and it always corresponds to the version
                of the main resource.
                
              • time (string) Time is timestamp of when these fields were set. It should always be empty
                if Operation is 'Apply'
                
                Time is a wrapper around time.Time which supports correct marshaling to
                YAML and JSON. Wrappers are provided for many of the factory methods that
                the time package offers.
                
            • name (string) Name must be unique within a namespace. Is required when creating
              resources, although some resources may allow a client to request the
              generation of an appropriate name automatically. Name is primarily intended
              for creation idempotence and configuration definition. Cannot be updated.
              More info: http://kubernetes.io/docs/user-guide/identifiers#names
              
            • namespace (string) Namespace defines the space within which each name must be unique. An empty
              namespace is equivalent to the "default" namespace, but "default" is the
              canonical representation. Not all objects are required to be scoped to a
              namespace - the value of this field for those objects will be empty.
              
              Must be a DNS_LABEL. Cannot be updated. More info:
              http://kubernetes.io/docs/user-guide/namespaces
              
            • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
              been deleted, this object will be garbage collected. If this object is
              managed by a controller, then an entry in this list will point to this
              controller, with the controller field set to true. There cannot be more
              than one managing controller.
              
              OwnerReference contains enough information to let you identify an owning
              object. An owning object must be in the same namespace as the dependent, or
              be cluster-scoped, so there is no namespace field.
              
              

              • apiVersion (string) API version of the referent.
                
              • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                owner cannot be deleted from the key-value store until this reference is
                removed. Defaults to false. To set this field, a user needs "delete"
                permission of the owner, otherwise 422 (Unprocessable Entity) will be
                returned.
                
              • controller (boolean) If true, this reference points to the managing controller.
                
              • kind (string) Kind of the referent. More info:
                https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                
              • name (string) Name of the referent. More info:
                http://kubernetes.io/docs/user-guide/identifiers#names
                
              • uid (string) UID of the referent. More info:
                http://kubernetes.io/docs/user-guide/identifiers#uids
                
            • resourceVersion (string) An opaque value that represents the internal version of this object that
              can be used by clients to determine when objects have changed. May be used
              for optimistic concurrency, change detection, and the watch operation on a
              resource or set of resources. Clients must treat these values as opaque and
              passed unmodified back to the server. They may only be valid for a
              particular resource or set of resources.
              
              Populated by the system. Read-only. Value must be treated as opaque by
              clients and . More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
              
            • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
              Read-only.
              
              DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
              the field is planned to be removed in 1.21 release.
              
            • uid (string) UID is the unique in time and space value for this object. It is typically
              generated by the server on successful creation of a resource and is not
              allowed to change on PUT operations.
              
              Populated by the system. Read-only. More info:
              http://kubernetes.io/docs/user-guide/identifiers#uids
              
          • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
            copied unchanged into the PVC that gets created from this template. The
            same fields as in a PersistentVolumeClaim are also valid here.
            
            PersistentVolumeClaimSpec describes the common attributes of storage
            devices and allows a Source for provider-specific attributes
            
            

            • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
              info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
              
            • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
              object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
              (PersistentVolumeClaim) If the provisioner or an external controller can
              support the specified data source, it will create a new volume based on the
              contents of the specified data source. If the AnyVolumeDataSource feature
              gate is enabled, this field will always have the same contents as the
              DataSourceRef field.
              
              TypedLocalObjectReference contains enough information to let you locate the
              typed referenced object inside the same namespace.
              
              

              • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                specified, the specified Kind must be in the core API group. For any other
                third-party types, APIGroup is required.
                
              • kind (string) Kind is the type of resource being referenced
                
              • name (string) Name is the name of resource being referenced
                
            • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
              non-empty volume is desired. This may be any local object from a non-empty
              API group (non core object) or a PersistentVolumeClaim object. When this
              field is specified, volume binding will only succeed if the type of the
              specified object matches some installed volume populator or dynamic
              provisioner. This field will replace the functionality of the DataSource
              field and as such if both fields are non-empty, they must have the same
              value. For backwards compatibility, both fields (DataSource and
              DataSourceRef) will be set to the same value automatically if one of them
              is empty and the other is non-empty. There are two important differences
              between DataSource and DataSourceRef: * While DataSource only allows two
              specific types of objects, DataSourceRef allows any non-core object, as
              well as PersistentVolumeClaim objects.
              * While DataSource ignores disallowed values (dropping them), DataSourceRef
              preserves all values, and generates an error if a disallowed value is
              specified. (Alpha) Using this field requires the AnyVolumeDataSource
              feature gate to be enabled.
              
              TypedLocalObjectReference contains enough information to let you locate the
              typed referenced object inside the same namespace.
              
              

              • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                specified, the specified Kind must be in the core API group. For any other
                third-party types, APIGroup is required.
                
              • kind (string) Kind is the type of resource being referenced
                
              • name (string) Name is the name of resource being referenced
                
            • resources (Object) Resources represents the minimum resources the volume should have. If
              RecoverVolumeExpansionFailure feature is enabled users are allowed to
              specify resource requirements that are lower than previous value but must
              still be higher than capacity recorded in the status field of the claim.
              More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
              
              ResourceRequirements describes the compute resource requirements.
              
              

              • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                info:
                https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                
                Quantity is a fixed-point representation of a number. It provides
                convenient marshaling/unmarshaling in JSON and YAML, in addition to
                String() and AsInt64() accessors.
                
                The serialization format is:
                
                (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                (signedNumber)
                
                No matter which of the three exponent forms is used, no quantity may
                represent a number greater than 2^63-1 in magnitude, nor may it have more
                than 3 decimal places. Numbers larger or more precise will be capped or
                rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                future if we require larger or smaller quantities.
                
                When a Quantity is parsed from a string, it will remember the type of
                suffix it had, and will use the same type again when it is serialized.
                
                Before serializing, Quantity will be put in "canonical form". This means
                that Exponent/suffix will be adjusted up or down (with a corresponding
                increase or decrease in Mantissa) such that:
                a. No precision is lost b. No fractional digits will be emitted c. The
                exponent (or suffix) is as large as possible. The sign will be omitted
                unless the number is negative.
                
                Examples:
                1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                
                Note that the quantity will NEVER be internally represented by a floating
                point number. That is the whole point of this exercise.
                
                Non-canonical values will still parse as long as they are well formed, but
                will be re-emitted in their canonical form. (So always use canonical form,
                or don't diff.)
                
                This format is intended to make it difficult to use these numbers without
                writing some sort of special handling code in the hopes that that will
                cause implementors to also use a fixed point implementation.
                
              • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                Requests is omitted for a container, it defaults to Limits if that is
                explicitly specified, otherwise to an implementation-defined value. More
                info:
                https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                
                Quantity is a fixed-point representation of a number. It provides
                convenient marshaling/unmarshaling in JSON and YAML, in addition to
                String() and AsInt64() accessors.
                
                The serialization format is:
                
                (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                (signedNumber)
                
                No matter which of the three exponent forms is used, no quantity may
                represent a number greater than 2^63-1 in magnitude, nor may it have more
                than 3 decimal places. Numbers larger or more precise will be capped or
                rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                future if we require larger or smaller quantities.
                
                When a Quantity is parsed from a string, it will remember the type of
                suffix it had, and will use the same type again when it is serialized.
                
                Before serializing, Quantity will be put in "canonical form". This means
                that Exponent/suffix will be adjusted up or down (with a corresponding
                increase or decrease in Mantissa) such that:
                a. No precision is lost b. No fractional digits will be emitted c. The
                exponent (or suffix) is as large as possible. The sign will be omitted
                unless the number is negative.
                
                Examples:
                1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                
                Note that the quantity will NEVER be internally represented by a floating
                point number. That is the whole point of this exercise.
                
                Non-canonical values will still parse as long as they are well formed, but
                will be re-emitted in their canonical form. (So always use canonical form,
                or don't diff.)
                
                This format is intended to make it difficult to use these numbers without
                writing some sort of special handling code in the hopes that that will
                cause implementors to also use a fixed point implementation.
                
            • selector (Object) A label query over volumes to consider for binding.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • storageClassName (string) Name of the StorageClass required by the claim. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
              
            • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
              Filesystem is implied when not included in claim spec.
              
            • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
              claim.
              
      • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
        machine and then exposed to the pod.
        
        Represents a Fibre Channel volume. Fibre Channel volumes can only be
        mounted as read/write once. Fibre Channel volumes support ownership
        management and SELinux relabeling.
        
        

        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
          "ext4" if unspecified.
          
        • lun (integer) Optional: FC target lun number
          
        • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
          ReadOnly setting in VolumeMounts.
          
        • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
          
        • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
          combination of targetWWNs and lun must be set, but not both simultaneously.
          
      • flexVolume (Object) FlexVolume represents a generic volume resource that is
        provisioned/attached using an exec based plugin.
        
        FlexVolume represents a generic volume resource that is
        provisioned/attached using an exec based plugin.
        
        

        • driver (string) Driver is the name of the driver to use for this volume.
          
        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
          on FlexVolume script.
          
        • options (map[string]string) Optional: Extra command options if any.
          
        • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
          ReadOnly setting in VolumeMounts.
          
        • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
          information to pass to the plugin scripts. This may be empty if no secret
          object is specified. If the secret object contains more than one secret,
          all secrets are passed to the plugin scripts.
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
      • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
        This depends on the Flocker control service being running
        
        Represents a Flocker volume mounted by the Flocker agent. One and only one
        of datasetName and datasetUUID should be set. Flocker volumes do not
        support ownership management or SELinux relabeling.
        
        

        • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
          should be considered as deprecated
          
        • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
          
      • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
        kubelet's host machine and then exposed to the pod. More info:
        https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
        
        Represents a Persistent Disk resource in Google Compute Engine.
        A GCE PD must exist before mounting to a container. The disk must also be
        in the same GCE project and zone as the kubelet. A GCE PD can only be
        mounted as read/write once or read-only many times. GCE PDs support
        ownership management and SELinux relabeling.
        
        

        • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
          filesystem type is supported by the host operating system. Examples:
          "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
          More info:
          https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
          
        • partition (integer) The partition in the volume that you want to mount. If omitted, the default
          is to mount by volume name. Examples: For volume /dev/sda1, you specify the
          partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
          you can leave the property empty). More info:
          https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
          
        • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
          More info:
          https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
          
        • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
          false. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
          
      • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
        GitRepo is deprecated. To provision a container with a git repo, mount an
        EmptyDir into an InitContainer that clones the repo using git, then mount
        the EmptyDir into the Pod's container.
        
        Represents a volume that is populated with the contents of a git
        repository. Git repo volumes do not support ownership management. Git repo
        volumes support SELinux relabeling.
        
        DEPRECATED: GitRepo is deprecated. To provision a container with a git
        repo, mount an EmptyDir into an InitContainer that clones the repo using
        git, then mount the EmptyDir into the Pod's container.
        
        

        • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
          supplied, the volume directory will be the git repository. Otherwise, if
          specified, the volume will contain the git repository in the subdirectory
          with the given name.
          
        • repository (string) Repository URL
          
        • revision (string) Commit hash for the specified revision.
          
      • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
        lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
        
        Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
        volumes do not support ownership management or SELinux relabeling.
        
        

        • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
          info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
          
        • path (string) Path is the Glusterfs volume path. More info:
          https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
          
        • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
          permissions. Defaults to false. More info:
          https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
          
      • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
        that is directly exposed to the container. This is generally used for
        system agents or other privileged things that are allowed to see the host
        machine. Most containers will NOT need this. More info:
        https://kubernetes.io/docs/concepts/storage/volumes#hostpath
        
        Represents a host path mapped into a pod. Host path volumes do not support
        ownership management or SELinux relabeling.
        
        

        • path (string) Path of the directory on the host. If the path is a symlink, it will follow
          the link to the real path. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#hostpath
          
        • type (string) Type for HostPath Volume Defaults to "" More info:
          https://kubernetes.io/docs/concepts/storage/volumes#hostpath
          
      • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
        host machine and then exposed to the pod. More info:
        https://examples.k8s.io/volumes/iscsi/README.md
        
        Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
        once. ISCSI volumes support ownership management and SELinux relabeling.
        
        

        • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
          
        • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
          
        • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
          filesystem type is supported by the host operating system. Examples:
          "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
          More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
          
        • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
          iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
          name) will be created for the connection.
          
        • iqn (string) Target iSCSI Qualified Name.
          
        • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
          (tcp).
          
        • lun (integer) iSCSI Target Lun number.
          
        • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
          port is other than default (typically TCP ports 860 and 3260).
          
        • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
          false.
          
        • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
          is other than default (typically TCP ports 860 and 3260).
          
      • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
        
      • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
        info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
        
        Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
        not support ownership management or SELinux relabeling.
        
        

        • path (string) Path that is exported by the NFS server. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#nfs
          
        • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
          permissions. Defaults to false. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#nfs
          
        • server (string) Server is the hostname or IP address of the NFS server. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#nfs
          
      • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
        PersistentVolumeClaim in the same namespace. More info:
        https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
        
        PersistentVolumeClaimVolumeSource references the user's PVC in the same
        namespace. This volume finds the bound PV and mounts that volume for the
        pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
        another type of volume that is owned by someone else (the system).
        
        

        • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
          the pod using this volume. More info:
          https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
          
        • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
          
      • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
        and mounted on kubelets host machine
        
        Represents a Photon Controller persistent disk resource.
        
        

        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
          "ext4" if unspecified.
          
        • pdID (string) ID that identifies Photon Controller persistent disk
          
      • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
        kubelets host machine
        
        PortworxVolumeSource represents a Portworx volume resource.
        
        

        • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
          supported by the host operating system. Ex. "ext4", "xfs". Implicitly
          inferred to be "ext4" if unspecified.
          
        • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
          setting in VolumeMounts.
          
        • volumeID (string) VolumeID uniquely identifies a Portworx volume
          
      • projected (Object) Items for all in one resources secrets, configmaps, and downward API
        
        Represents a projected volume source
        
        

        • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
          octal value between 0000 and 0777 or a decimal value between 0 and 511.
          YAML accepts both octal and decimal values, JSON requires decimal values
          for mode bits. Directories within the path are not affected by this
          setting. This might be in conflict with other options that affect the file
          mode, like fsGroup, and the result can be other mode bits set.
          
        • sources ([]Object) list of volume projections
          
          Projection that may be projected along with other supported volume types
          
          

          • configMap (Object) information about the configMap data to project
            
            Adapts a ConfigMap into a projected volume.
            The contents of the target ConfigMap's Data field will be presented in a
            projected volume as files using the keys in the Data field as the file
            names, unless the items element is populated with specific mappings of keys
            to paths. Note that this is identical to a configmap volume source without
            the default mode.
            
            

            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • downwardAPI (Object) information about the downwardAPI data to project
            
            Represents downward API info for projecting into a projected volume. Note
            that this is identical to a downwardAPI volume source without the default
            mode.
            
            

            • items ([]Object) Items is a list of DownwardAPIVolume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • secret (Object) information about the secret data to project
            
            Adapts a secret into a projected volume.
            The contents of the target Secret's Data field will be presented in a
            projected volume as files using the keys in the Data field as the file
            names. Note that this is identical to a secret volume source without the
            default mode.
            
            

            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret or its key must be defined
              
          • serviceAccountToken (Object) information about the serviceAccountToken data to project
            
            ServiceAccountTokenProjection represents a projected service account token
            volume. This projection can be used to insert a service account token into
            the pods runtime filesystem for use against APIs (Kubernetes API Server or
            otherwise).
            
            

            • audience (string) Audience is the intended audience of the token. A recipient of a token must
              identify itself with an identifier specified in the audience of the token,
              and otherwise should reject the token. The audience defaults to the
              identifier of the apiserver.
              
            • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
              account token. As the token approaches expiration, the kubelet volume
              plugin will proactively rotate the service account token. The kubelet will
              start trying to rotate the token if the token is older than 80 percent of
              its time to live or if the token is older than 24 hours.Defaults to 1 hour
              and must be at least 10 minutes.
              
            • path (string) Path is the path relative to the mount point of the file to project the
              token into.
              
      • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
        
        Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
        volumes do not support ownership management or SELinux relabeling.
        
        

        • group (string) Group to map volume access to Default is no group
          
        • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
          permissions. Defaults to false.
          
        • registry (string) Registry represents a single or multiple Quobyte Registry services
          specified as a string as host:port pair (multiple entries are separated
          with commas) which acts as the central registry for volumes
          
        • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
          provisioned Quobyte volumes, value is set by the plugin
          
        • user (string) User to map volume access to Defaults to serivceaccount user
          
        • volume (string) Volume is a string that references an already created Quobyte volume by
          name.
          
      • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
        lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
        
        Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
        volumes support ownership management and SELinux relabeling.
        
        

        • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
          filesystem type is supported by the host operating system. Examples:
          "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
          More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
          
        • image (string) The rados image name. More info:
          https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
        • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
          More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
        • monitors ([]string) A collection of Ceph monitors. More info:
          https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
        • pool (string) The rados pool name. Default is rbd. More info:
          https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
        • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
          false. More info:
          https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
        • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
          overrides keyring. Default is nil. More info:
          https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • user (string) The rados user name. Default is admin. More info:
          https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
          
      • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
        Kubernetes nodes.
        
        ScaleIOVolumeSource represents a persistent ScaleIO volume
        
        

        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
          
        • gateway (string) The host address of the ScaleIO API Gateway.
          
        • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
          
        • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
          setting in VolumeMounts.
          
        • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
          information. If this is not provided, Login operation will fail.
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
          
        • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
          ThinProvisioned. Default is ThinProvisioned.
          
        • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
          
        • system (string) The name of the storage system as configured in ScaleIO.
          
        • volumeName (string) The name of a volume already created in the ScaleIO system that is
          associated with this volume source.
          
      • secret (Object) Secret represents a secret that should populate this volume. More info:
        https://kubernetes.io/docs/concepts/storage/volumes#secret
        
        Adapts a Secret into a volume.
        The contents of the target Secret's Data field will be presented in a
        volume as files using the keys in the Data field as the file names. Secret
        volumes support ownership management and SELinux relabeling.
        
        

        • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
          Must be an octal value between 0000 and 0777 or a decimal value between 0
          and 511. YAML accepts both octal and decimal values, JSON requires decimal
          values for mode bits. Defaults to 0644. Directories within the path are not
          affected by this setting. This might be in conflict with other options that
          affect the file mode, like fsGroup, and the result can be other mode bits
          set.
          
        • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
          Secret will be projected into the volume as a file whose name is the key
          and content is the value. If specified, the listed keys will be projected
          into the specified paths, and unlisted keys will not be present. If a key
          is specified which is not present in the Secret, the volume setup will
          error unless it is marked optional. Paths must be relative and may not
          contain the '..' path or start with '..'.
          
          Maps a string key to a path within a volume.
          
          

          • key (string) The key to project.
            
          • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
            value between 0000 and 0777 or a decimal value between 0 and 511. YAML
            accepts both octal and decimal values, JSON requires decimal values for
            mode bits. If not specified, the volume defaultMode will be used. This
            might be in conflict with other options that affect the file mode, like
            fsGroup, and the result can be other mode bits set.
            
          • path (string) The relative path of the file to map the key to. May not be an absolute
            path. May not contain the path element '..'. May not start with the string
            '..'.
            
        • optional (boolean) Specify whether the Secret or its keys must be defined
          
        • secretName (string) Name of the secret in the pod's namespace to use. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#secret
          
      • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
        nodes.
        
        Represents a StorageOS persistent volume resource.
        
        

        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
          "ext4" if unspecified.
          
        • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
          setting in VolumeMounts.
          
        • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
          credentials. If not specified, default values will be attempted.
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
          are only unique within a namespace.
          
        • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
          namespace is specified then the Pod's namespace will be used. This allows
          the Kubernetes name scoping to be mirrored within StorageOS for tighter
          integration. Set VolumeName to any name to override the default behaviour.
          Set to "default" if you are not using namespaces within StorageOS.
          Namespaces that do not pre-exist within StorageOS will be created.
          
      • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
        host machine
        
        Represents a vSphere volume resource.
        
        

        • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
          operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
          "ext4" if unspecified.
          
        • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
          StoragePolicyName.
          
        • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
          
        • volumePath (string) Path that identifies vSphere volume vmdk
          
  • status (Object) Most recently observed status of the pod. This data may not be up to date.
    Populated by the system. Read-only. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    PodStatus represents information about the status of a pod. Status may
    trail the actual state of a system, especially if the node that hosts the
    pod cannot contact the control plane.
    
    

    • conditions ([]Object) Current service state of pod. More info:
      https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
      
      PodCondition contains details for the current condition of this pod.
      
      

      • lastProbeTime (string) Last time we probed the condition.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • lastTransitionTime (string) Last time the condition transitioned from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) Human-readable message indicating details about last transition.
        
      • reason (string) Unique, one-word, CamelCase reason for the condition's last transition.
        
      • status (string) Status is the status of the condition. Can be True, False, Unknown. More
        info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
        
      • type (string) Type is the type of the condition. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions
        
        
        
    • containerStatuses ([]Object) The list has one entry per container in the manifest. Each entry is
      currently the output of `docker inspect`. More info:
      https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
      
      ContainerStatus contains details for the current status of this container.
      
      

      • containerID (string) Container's ID in the format 'docker://(container_id)'.
        
      • image (string) The image the container is running. More info:
        https://kubernetes.io/docs/concepts/containers/images.
        
      • imageID (string) ImageID of the container's image.
        
      • lastState (Object) Details about the container's last termination condition.
        
        ContainerState holds a possible state of container. Only one of its members
        may be specified. If none of them is specified, the default one is
        ContainerStateWaiting.
        
        

        • running (Object) Details about a running container
          
          ContainerStateRunning is a running state of a container.
          
          

          • startedAt (string) Time at which the container was last (re-)started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • terminated (Object) Details about a terminated container
          
          ContainerStateTerminated is a terminated state of a container.
          
          

          • containerID (string) Container's ID in the format 'docker://(container_id)'
            
          • exitCode (integer) Exit status from the last termination of the container
            
          • finishedAt (string) Time at which the container last terminated
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Message regarding the last termination of the container
            
          • reason (string) (brief) reason from the last termination of the container
            
          • signal (integer) Signal from the last termination of the container
            
          • startedAt (string) Time at which previous execution of the container started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • waiting (Object) Details about a waiting container
          
          ContainerStateWaiting is a waiting state of a container.
          
          

          • message (string) Message regarding why the container is not yet running.
            
          • reason (string) (brief) reason the container is not yet running.
            
      • name (string) This must be a DNS_LABEL. Each container in a pod must have a unique name.
        Cannot be updated.
        
      • ready (boolean) Specifies whether the container has passed its readiness probe.
        
      • restartCount (integer) The number of times the container has been restarted.
        
      • started (boolean) Specifies whether the container has passed its startup probe. Initialized
        as false, becomes true after startupProbe is considered successful. Resets
        to false when the container is restarted, or if kubelet loses state
        temporarily. Is always true when no startupProbe is defined.
        
      • state (Object) Details about the container's current condition.
        
        ContainerState holds a possible state of container. Only one of its members
        may be specified. If none of them is specified, the default one is
        ContainerStateWaiting.
        
        

        • running (Object) Details about a running container
          
          ContainerStateRunning is a running state of a container.
          
          

          • startedAt (string) Time at which the container was last (re-)started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • terminated (Object) Details about a terminated container
          
          ContainerStateTerminated is a terminated state of a container.
          
          

          • containerID (string) Container's ID in the format 'docker://(container_id)'
            
          • exitCode (integer) Exit status from the last termination of the container
            
          • finishedAt (string) Time at which the container last terminated
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Message regarding the last termination of the container
            
          • reason (string) (brief) reason from the last termination of the container
            
          • signal (integer) Signal from the last termination of the container
            
          • startedAt (string) Time at which previous execution of the container started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • waiting (Object) Details about a waiting container
          
          ContainerStateWaiting is a waiting state of a container.
          
          

          • message (string) Message regarding why the container is not yet running.
            
          • reason (string) (brief) reason the container is not yet running.
            
    • ephemeralContainerStatuses ([]Object) Status for any ephemeral containers that have run in this pod. This field
      is beta-level and available on clusters that haven't disabled the
      EphemeralContainers feature gate.
      
      ContainerStatus contains details for the current status of this container.
      
      

      • containerID (string) Container's ID in the format 'docker://(container_id)'.
        
      • image (string) The image the container is running. More info:
        https://kubernetes.io/docs/concepts/containers/images.
        
      • imageID (string) ImageID of the container's image.
        
      • lastState (Object) Details about the container's last termination condition.
        
        ContainerState holds a possible state of container. Only one of its members
        may be specified. If none of them is specified, the default one is
        ContainerStateWaiting.
        
        

        • running (Object) Details about a running container
          
          ContainerStateRunning is a running state of a container.
          
          

          • startedAt (string) Time at which the container was last (re-)started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • terminated (Object) Details about a terminated container
          
          ContainerStateTerminated is a terminated state of a container.
          
          

          • containerID (string) Container's ID in the format 'docker://(container_id)'
            
          • exitCode (integer) Exit status from the last termination of the container
            
          • finishedAt (string) Time at which the container last terminated
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Message regarding the last termination of the container
            
          • reason (string) (brief) reason from the last termination of the container
            
          • signal (integer) Signal from the last termination of the container
            
          • startedAt (string) Time at which previous execution of the container started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • waiting (Object) Details about a waiting container
          
          ContainerStateWaiting is a waiting state of a container.
          
          

          • message (string) Message regarding why the container is not yet running.
            
          • reason (string) (brief) reason the container is not yet running.
            
      • name (string) This must be a DNS_LABEL. Each container in a pod must have a unique name.
        Cannot be updated.
        
      • ready (boolean) Specifies whether the container has passed its readiness probe.
        
      • restartCount (integer) The number of times the container has been restarted.
        
      • started (boolean) Specifies whether the container has passed its startup probe. Initialized
        as false, becomes true after startupProbe is considered successful. Resets
        to false when the container is restarted, or if kubelet loses state
        temporarily. Is always true when no startupProbe is defined.
        
      • state (Object) Details about the container's current condition.
        
        ContainerState holds a possible state of container. Only one of its members
        may be specified. If none of them is specified, the default one is
        ContainerStateWaiting.
        
        

        • running (Object) Details about a running container
          
          ContainerStateRunning is a running state of a container.
          
          

          • startedAt (string) Time at which the container was last (re-)started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • terminated (Object) Details about a terminated container
          
          ContainerStateTerminated is a terminated state of a container.
          
          

          • containerID (string) Container's ID in the format 'docker://(container_id)'
            
          • exitCode (integer) Exit status from the last termination of the container
            
          • finishedAt (string) Time at which the container last terminated
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Message regarding the last termination of the container
            
          • reason (string) (brief) reason from the last termination of the container
            
          • signal (integer) Signal from the last termination of the container
            
          • startedAt (string) Time at which previous execution of the container started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • waiting (Object) Details about a waiting container
          
          ContainerStateWaiting is a waiting state of a container.
          
          

          • message (string) Message regarding why the container is not yet running.
            
          • reason (string) (brief) reason the container is not yet running.
            
    • hostIP (string) IP address of the host to which the pod is assigned. Empty if not yet
      scheduled.
      
    • initContainerStatuses ([]Object) The list has one entry per init container in the manifest. The most recent
      successful init container will have ready = true, the most recently started
      container will have startTime set. More info:
      https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-and-container-status
      
      ContainerStatus contains details for the current status of this container.
      
      

      • containerID (string) Container's ID in the format 'docker://(container_id)'.
        
      • image (string) The image the container is running. More info:
        https://kubernetes.io/docs/concepts/containers/images.
        
      • imageID (string) ImageID of the container's image.
        
      • lastState (Object) Details about the container's last termination condition.
        
        ContainerState holds a possible state of container. Only one of its members
        may be specified. If none of them is specified, the default one is
        ContainerStateWaiting.
        
        

        • running (Object) Details about a running container
          
          ContainerStateRunning is a running state of a container.
          
          

          • startedAt (string) Time at which the container was last (re-)started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • terminated (Object) Details about a terminated container
          
          ContainerStateTerminated is a terminated state of a container.
          
          

          • containerID (string) Container's ID in the format 'docker://(container_id)'
            
          • exitCode (integer) Exit status from the last termination of the container
            
          • finishedAt (string) Time at which the container last terminated
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Message regarding the last termination of the container
            
          • reason (string) (brief) reason from the last termination of the container
            
          • signal (integer) Signal from the last termination of the container
            
          • startedAt (string) Time at which previous execution of the container started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • waiting (Object) Details about a waiting container
          
          ContainerStateWaiting is a waiting state of a container.
          
          

          • message (string) Message regarding why the container is not yet running.
            
          • reason (string) (brief) reason the container is not yet running.
            
      • name (string) This must be a DNS_LABEL. Each container in a pod must have a unique name.
        Cannot be updated.
        
      • ready (boolean) Specifies whether the container has passed its readiness probe.
        
      • restartCount (integer) The number of times the container has been restarted.
        
      • started (boolean) Specifies whether the container has passed its startup probe. Initialized
        as false, becomes true after startupProbe is considered successful. Resets
        to false when the container is restarted, or if kubelet loses state
        temporarily. Is always true when no startupProbe is defined.
        
      • state (Object) Details about the container's current condition.
        
        ContainerState holds a possible state of container. Only one of its members
        may be specified. If none of them is specified, the default one is
        ContainerStateWaiting.
        
        

        • running (Object) Details about a running container
          
          ContainerStateRunning is a running state of a container.
          
          

          • startedAt (string) Time at which the container was last (re-)started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • terminated (Object) Details about a terminated container
          
          ContainerStateTerminated is a terminated state of a container.
          
          

          • containerID (string) Container's ID in the format 'docker://(container_id)'
            
          • exitCode (integer) Exit status from the last termination of the container
            
          • finishedAt (string) Time at which the container last terminated
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Message regarding the last termination of the container
            
          • reason (string) (brief) reason from the last termination of the container
            
          • signal (integer) Signal from the last termination of the container
            
          • startedAt (string) Time at which previous execution of the container started
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • waiting (Object) Details about a waiting container
          
          ContainerStateWaiting is a waiting state of a container.
          
          

          • message (string) Message regarding why the container is not yet running.
            
          • reason (string) (brief) reason the container is not yet running.
            
    • message (string) A human readable message indicating details about why the pod is in this
      condition.
      
    • nominatedNodeName (string) nominatedNodeName is set only when this pod preempts other pods on the
      node, but it cannot be scheduled right away as preemption victims receive
      their graceful termination periods. This field does not guarantee that the
      pod will be scheduled on this node. Scheduler may decide to place the pod
      elsewhere if other nodes become available sooner. Scheduler may also decide
      to give the resources on this node to a higher priority pod that is created
      after preemption. As a result, this field may be different than
      PodSpec.nodeName when the pod is scheduled.
      
    • phase (string) The phase of a Pod is a simple, high-level summary of where the Pod is in
      its lifecycle. The conditions array, the reason and message fields, and the
      individual container status arrays contain more detail about the pod's
      status. There are five possible phase values:
      
      Pending: The pod has been accepted by the Kubernetes system, but one or
      more of the container images has not been created. This includes time
      before being scheduled as well as time spent downloading images over the
      network, which could take a while. Running: The pod has been bound to a
      node, and all of the containers have been created. At least one container
      is still running, or is in the process of starting or restarting.
      Succeeded: All containers in the pod have terminated in success, and will
      not be restarted. Failed: All containers in the pod have terminated, and at
      least one container has terminated in failure. The container either exited
      with non-zero status or was terminated by the system. Unknown: For some
      reason the state of the pod could not be obtained, typically due to an
      error in communicating with the host of the pod.
      
      More info:
      https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-phase
      
      
      
    • podIP (string) IP address allocated to the pod. Routable at least within the cluster.
      Empty if not yet allocated.
      
    • podIPs ([]Object) podIPs holds the IP addresses allocated to the pod. If this field is
      specified, the 0th entry must match the podIP field. Pods may be allocated
      at most 1 value for each of IPv4 and IPv6. This list is empty if no IPs
      have been allocated yet.
      
      IP address information for entries in the (plural) PodIPs field. Each entry
      includes: IP: An IP address allocated to the pod. Routable at least within
      the cluster.
      
      

      • ip (string) ip is an IP address (IPv4 or IPv6) assigned to the pod
        
    • qosClass (string) The Quality of Service (QOS) classification assigned to the pod based on
      resource requirements See PodQOSClass type for available QOS classes More
      info:
      https://git.k8s.io/community/contributors/design-proposals/node/resource-qos.md
      
      
      
    • reason (string) A brief CamelCase message indicating details about why the pod is in this
      state. e.g. 'Evicted'
      
    • startTime (string) RFC 3339 date and time at which the object was acknowledged by the Kubelet.
      This is before the Kubelet pulled the container image(s) for the pod.
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
• Deployment Deployment enables declarative updates for Pods and ReplicaSets.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Specification of the desired behavior of the Deployment.
    
    DeploymentSpec is the specification of the desired behavior of the
    Deployment.
    
    

    • minReadySeconds (integer) Minimum number of seconds for which a newly created pod should be ready
      without any of its container crashing, for it to be considered available.
      Defaults to 0 (pod will be considered available as soon as it is ready)
      
    • paused (boolean) Indicates that the deployment is paused.
      
    • progressDeadlineSeconds (integer) The maximum time in seconds for a deployment to make progress before it is
      considered to be failed. The deployment controller will continue to process
      failed deployments and a condition with a ProgressDeadlineExceeded reason
      will be surfaced in the deployment status. Note that progress will not be
      estimated during the time a deployment is paused. Defaults to 600s.
      
    • replicas (integer) Number of desired pods. This is a pointer to distinguish between explicit
      zero and not specified. Defaults to 1.
      
    • revisionHistoryLimit (integer) The number of old ReplicaSets to retain to allow rollback. This is a
      pointer to distinguish between explicit zero and not specified. Defaults to
      10.
      
    • selector (Object) Label selector for pods. Existing ReplicaSets whose pods are selected by
      this will be the ones affected by this deployment. It must match the pod
      template's labels.
      
      A label selector is a label query over a set of resources. The result of
      matchLabels and matchExpressions are ANDed. An empty label selector matches
      all objects. A null label selector matches no objects.
      
      

      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
        are ANDed.
        
        A label selector requirement is a selector that contains values, a key, and
        an operator that relates the key and values.
        
        

        • key (string) key is the label key that the selector applies to.
          
        • operator (string) operator represents a key's relationship to a set of values. Valid
          operators are In, NotIn, Exists and DoesNotExist.
          
        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
          values array must be non-empty. If the operator is Exists or DoesNotExist,
          the values array must be empty. This array is replaced during a strategic
          merge patch.
          
      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
        matchLabels map is equivalent to an element of matchExpressions, whose key
        field is "key", the operator is "In", and the values array contains only
        "value". The requirements are ANDed.
        
    • strategy (Object) The deployment strategy to use to replace existing pods with new ones.
      
      DeploymentStrategy describes how to replace existing pods with new ones.
      
      

      • rollingUpdate (Object) Rolling update config params. Present only if DeploymentStrategyType =
        RollingUpdate.
        
        Spec to control the desired behavior of rolling update.
        
        

        • maxSurge (string) The maximum number of pods that can be scheduled above the desired number
          of pods. Value can be an absolute number (ex: 5) or a percentage of desired
          pods (ex: 10%!)(MISSING). This can not be 0 if MaxUnavailable is 0.
          Absolute number is calculated from percentage by rounding up. Defaults to
          25%! (MISSING)Example: when this is set to 30%!,(MISSING) the new
          ReplicaSet can be scaled up immediately when the rolling update starts,
          such that the total number of old and new pods do not exceed
          130%!o(MISSING)f desired pods. Once old pods have been killed, new
          ReplicaSet can be scaled up further, ensuring that total number of pods
          running at any time during the update is at most 130%!o(MISSING)f desired
          pods.
          
          IntOrString is a type that can hold an int32 or a string. When used in JSON
          or YAML marshalling and unmarshalling, it produces or consumes the inner
          type. This allows you to have, for example, a JSON field that can accept a
          name or number.
          
        • maxUnavailable (string) The maximum number of pods that can be unavailable during the update. Value
          can be an absolute number (ex: 5) or a percentage of desired pods (ex:
          10%!)(MISSING). Absolute number is calculated from percentage by rounding
          down. This can not be 0 if MaxSurge is 0. Defaults to 25%!
          (MISSING)Example: when this is set to 30%!,(MISSING) the old ReplicaSet can
          be scaled down to 70%!o(MISSING)f desired pods immediately when the rolling
          update starts. Once new pods are ready, old ReplicaSet can be scaled down
          further, followed by scaling up the new ReplicaSet, ensuring that the total
          number of pods available at all times during the update is at least
          70%!o(MISSING)f desired pods.
          
          IntOrString is a type that can hold an int32 or a string. When used in JSON
          or YAML marshalling and unmarshalling, it produces or consumes the inner
          type. This allows you to have, for example, a JSON field that can accept a
          name or number.
          
      • type (string) Type of deployment. Can be "Recreate" or "RollingUpdate". Default is
        RollingUpdate.
        
        
        
    • template (Object) Template describes the pods that will be created.
      
      PodTemplateSpec describes the data a pod should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the pod. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        PodSpec is a description of a pod.
        
        

        • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
          StartTime before the system will actively try to mark it failed and kill
          associated containers. Value must be a positive integer.
          
        • affinity (Object) If specified, the pod's scheduling constraints
          
          Affinity is a group of affinity scheduling rules.
          
          

          • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
            
            Node affinity is a group of node affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node matches
              the corresponding matchExpressions; the node(s) with the highest sum are
              the most preferred.
              
              An empty preferred scheduling term matches all objects with implicit weight
              0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
              (i.e. is also a no-op).
              
              

              • preference (Object) A node selector term, associated with the corresponding weight.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
              • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to an update), the system may or may not try
              to eventually evict the pod from its node.
              
              A node selector represents the union of the results of one or more label
              queries over a set of nodes; that is, it represents the OR of the selectors
              represented by the node selector terms.
              
              

              • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
          • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
            same node, zone, etc. as some other pod(s)).
            
            Pod affinity is a group of inter pod affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node has pods
              which matches the corresponding podAffinityTerm; the node(s) with the
              highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to a pod label update), the system may or
              may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
          • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
            in the same node, zone, etc. as some other pod(s)).
            
            Pod anti affinity is a group of inter pod anti affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              anti-affinity expressions specified by this field, but it may choose a node
              that violates one or more of the expressions. The node that is most
              preferred is the one with the greatest sum of weights, i.e. for each node
              that meets all of the scheduling requirements (resource request,
              requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
              iterating through the elements of this field and adding "weight" to the sum
              if the node has pods which matches the corresponding podAffinityTerm; the
              node(s) with the highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              anti-affinity requirements specified by this field cease to be met at some
              point during pod execution (e.g. due to a pod label update), the system may
              or may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
        • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
          should be automatically mounted.
          
        • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
          added or removed. There must be at least one container in a Pod. Cannot be
          updated.
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
          merged to the generated DNS configuration based on DNSPolicy.
          
          PodDNSConfig defines the DNS parameters of a pod in addition to those
          generated from DNSPolicy.
          
          

          • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
            nameservers generated from DNSPolicy. Duplicated nameservers will be
            removed.
            
          • options ([]Object) A list of DNS resolver options. This will be merged with the base options
            generated from DNSPolicy. Duplicated entries will be removed. Resolution
            options given in Options will override those that appear in the base
            DNSPolicy.
            
            PodDNSConfigOption defines DNS resolver options of a pod.
            
            

            • name (string) Required.
              
            • value (string) (empty)
              
          • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
            the base search paths generated from DNSPolicy. Duplicated search paths
            will be removed.
            
        • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
          'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
          parameters given in DNSConfig will be merged with the policy selected with
          DNSPolicy. To have DNS options set along with hostNetwork, you have to
          specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
          
          
          
        • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
          injected into pod's environment variables, matching the syntax of Docker
          links. Optional: Defaults to true.
          
        • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
          run in an existing pod to perform user-initiated actions such as debugging.
          This list cannot be specified when creating a pod, and it cannot be
          modified by updating the pod spec. In order to add an ephemeral container
          to an existing pod, use the pod's ephemeralcontainers subresource. This
          field is beta-level and available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          An EphemeralContainer is a temporary container that you may add to an
          existing Pod for user-initiated activities such as debugging. Ephemeral
          containers have no resource or scheduling guarantees, and they will not be
          restarted when they exit or when a Pod is removed or restarted. The kubelet
          may evict a Pod if an ephemeral container causes the Pod to exceed its
          resource allocation.
          
          To add an ephemeral container, use the ephemeralcontainers subresource of
          an existing Pod. Ephemeral containers may not be removed or restarted.
          
          This is a beta feature available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
            unique among all containers, init containers and ephemeral containers.
            
          • ports ([]Object) Ports are not allowed for ephemeral containers.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
            use spare resources already allocated to the pod.
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
            container should be run with. If set, the fields of SecurityContext
            override the equivalent fields of PodSecurityContext.
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
            container targets. The ephemeral container will be run in the namespaces
            (IPC, PID, etc) of this container. If not set then the ephemeral container
            uses the namespaces configured in the Pod spec.
            
            The container runtime must implement support for this feature. If the
            runtime does not support namespace targeting then the result of setting
            this field is undefined.
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
            not allowed for ephemeral containers. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
          the pod's hosts file if specified. This is only valid for non-hostNetwork
          pods.
          
          HostAlias holds the mapping between IP and hostnames that will be injected
          as an entry in the pod's hosts file.
          
          

          • hostnames ([]string) Hostnames for the above IP address.
            
          • ip (string) IP address of the host file entry.
            
        • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
          
        • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
          If this option is set, the ports that will be used must be specified.
          Default to false.
          
        • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
          
        • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
          be set to a system-defined value.
          
        • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
          namespace to use for pulling any of the images used by this PodSpec. If
          specified, these secrets will be passed to individual puller
          implementations for them to use. For example, in the case of docker, only
          DockerConfig type secrets are honored. More info:
          https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
          executed in order prior to containers being started. If any init container
          fails, the pod is considered to have failed and is handled according to its
          restartPolicy. The name for an init container or normal container must be
          unique among all containers. Init containers may not have Lifecycle
          actions, Readiness probes, Liveness probes, or Startup probes. The
          resourceRequirements of an init container are taken into account during
          scheduling by finding the highest request/limit for each resource type, and
          then using the max of of that value or the sum of the normal containers.
          Limits are applied to init containers in a similar fashion. Init containers
          cannot currently be added or removed. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
          non-empty, the scheduler simply schedules this pod onto that node, assuming
          that it fits resource requirements.
          
        • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
          Selector which must match a node's labels for the pod to be scheduled on
          that node. More info:
          https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
          
        • os (Object) Specifies the OS of the containers in the pod. Some pod and container
          fields are restricted if this is set.
          
          If the OS field is set to linux, the following fields must be unset:
          -securityContext.windowsOptions
          
          If the OS field is set to windows, following fields must be unset: -
          spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
          spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
          spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
          spec.shareProcessNamespace - spec.securityContext.runAsUser -
          spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
          spec.containers[*].securityContext.seLinuxOptions -
          spec.containers[*].securityContext.seccompProfile -
          spec.containers[*].securityContext.capabilities -
          spec.containers[*].securityContext.readOnlyRootFilesystem -
          spec.containers[*].securityContext.privileged -
          spec.containers[*].securityContext.allowPrivilegeEscalation -
          spec.containers[*].securityContext.procMount -
          spec.containers[*].securityContext.runAsUser -
          spec.containers[*].securityContext.runAsGroup This is an alpha field and
          requires the IdentifyPodOS feature
          
          PodOS defines the OS parameters of a pod.
          
          

          • name (string) Name is the name of the operating system. The currently supported values
            are linux and windows. Additional value may be defined in future and can be
            one of:
            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
            Clients should expect to handle additional values and treat unrecognized
            values in this field as os: null
            
        • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
          a given RuntimeClass. This field will be autopopulated at admission time by
          the RuntimeClass admission controller. If the RuntimeClass admission
          controller is enabled, overhead must not be set in Pod create requests. The
          RuntimeClass admission controller will reject Pod create requests which
          have the overhead already set. If RuntimeClass is configured and selected
          in the PodSpec, Overhead will be set to the value defined in the
          corresponding RuntimeClass, otherwise it will remain unset and treated as
          zero. More info:
          https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
          This field is beta-level as of Kubernetes v1.18, and is only honored by
          servers that enable the PodOverhead feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
          of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
          This field is beta-level, gated by the NonPreemptingPriority feature-gate.
          
        • priority (integer) The priority value. Various system components use this field to find the
          priority of the pod. When Priority Admission Controller is enabled, it
          prevents users from setting this field. The admission controller populates
          this field from PriorityClassName. The higher the value, the higher the
          priority.
          
        • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
          "system-cluster-critical" are two special keywords which indicate the
          highest priorities with the former being the highest priority. Any other
          name must be defined by creating a PriorityClass object with that name. If
          not specified, the pod priority will be default or zero if there is no
          default.
          
        • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
          pod is ready when all its containers are ready AND all conditions specified
          in the readiness gates have status equal to "True" More info:
          https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
          
          PodReadinessGate contains the reference to a pod condition
          
          

          • conditionType (string) ConditionType refers to a condition in the pod's condition list with
            matching type.
            
            
            
        • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
          Never. Default to Always. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
          
          
          
        • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
          which should be used to run this pod. If no RuntimeClass resource matches
          the named class, the pod will not be run. If unset or empty, the "legacy"
          RuntimeClass will be used, which is an implicit class with an empty
          definition that uses the default runtime handler. More info:
          https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
          beta feature as of Kubernetes v1.14.
          
        • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
          specified, the pod will be dispatched by default scheduler.
          
        • securityContext (Object) SecurityContext holds pod-level security attributes and common container
          settings. Optional: Defaults to empty. See type description for default
          values of each field.
          
          PodSecurityContext holds pod-level security attributes and common container
          settings. Some fields are also present in container.securityContext. Field
          values of container.securityContext take precedence over field values of
          PodSecurityContext.
          
          

          • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
            volume types allow the Kubelet to change the ownership of that volume to be
            owned by the pod:
            
            1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
            created in the volume will be owned by FSGroup) 3. The permission bits are
            OR'd with rw-rw----
            
            If unset, the Kubelet will not modify the ownership and permissions of any
            volume. Note that this field cannot be set when spec.os.name is windows.
            
          • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
            of the volume before being exposed inside Pod. This field will only apply
            to volume types which support fsGroup based ownership(and permissions). It
            will have no effect on ephemeral volume types such as: secret, configmaps
            and emptydir. Valid values are "OnRootMismatch" and "Always". If not
            specified, "Always" is used. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence for that container.
            Note that this field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
            field cannot be set when spec.os.name is windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
            addition to the container's primary GID. If unspecified, no groups will be
            added to any container. Note that this field cannot be set when
            spec.os.name is windows.
            
          • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
            unsupported sysctls (by the container runtime) might fail to launch. Note
            that this field cannot be set when spec.os.name is windows.
            
            Sysctl defines a kernel parameter to be set
            
            

            • name (string) Name of a property to set
              
            • value (string) Value of a property to set
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options within a container's SecurityContext will be used. If set in
            both SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
          Deprecated: Use serviceAccountName instead.
          
        • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
          pod. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
          
        • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
          than the leaf name (the default). In Linux containers, this means setting
          the FQDN in the hostname field of the kernel (the nodename field of struct
          utsname). In Windows containers, this means setting the registry value of
          hostname for the registry key
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
          FQDN. If a pod does not have FQDN, this has no effect. Default to false.
          
        • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
          When this is set containers will be able to view and signal processes from
          other containers in the same pod, and the first process in each container
          will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
          be set. Optional: Default to false.
          
        • subdomain (string) If specified, the fully qualified Pod hostname will be
          "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
          specified, the pod will not have a domainname at all.
          
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
          decreased in delete request. Value must be non-negative integer. The value
          zero indicates stop immediately via the kill signal (no opportunity to shut
          down). If this value is nil, the default grace period will be used instead.
          The grace period is the duration in seconds after the processes running in
          the pod are sent a termination signal and the time when the processes are
          forcibly halted with a kill signal. Set this value longer than the expected
          cleanup time for your process. Defaults to 30 seconds.
          
        • tolerations ([]Object) If specified, the pod's tolerations.
          
          The pod this Toleration is attached to tolerates any taint that matches the
          triple (key,value,effect) using the matching operator (operator).
          
          

          • effect (string) Effect indicates the taint effect to match. Empty means match all taint
            effects. When specified, allowed values are NoSchedule, PreferNoSchedule
            and NoExecute.
            
            
            
          • key (string) Key is the taint key that the toleration applies to. Empty means match all
            taint keys. If the key is empty, operator must be Exists; this combination
            means to match all values and all keys.
            
          • operator (string) Operator represents a key's relationship to the value. Valid operators are
            Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
            value, so that a pod can tolerate all taints of a particular category.
            
            
            
          • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
            be of effect NoExecute, otherwise this field is ignored) tolerates the
            taint. By default, it is not set, which means tolerate the taint forever
            (do not evict). Zero and negative values will be treated as 0 (evict
            immediately) by the system.
            
          • value (string) Value is the taint value the toleration matches to. If the operator is
            Exists, the value should be empty, otherwise just a regular string.
            
        • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
          across topology domains. Scheduler will schedule pods in a way which abides
          by the constraints. All topologySpreadConstraints are ANDed.
          
          TopologySpreadConstraint specifies how to spread matching pods among the
          given topology.
          
          

          • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
            selector are counted to determine the number of pods in their corresponding
            topology domain.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
            When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
            difference between the number of matching pods in the target topology and
            the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
            and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
            zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
            to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
            ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
            incoming pod can be scheduled onto any zone. When
            `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
            topologies that satisfy it. It's a required field. Default value is 1 and 0
            is not allowed.
            
          • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
            key and identical values are considered to be in the same topology. We
            consider each (key, value) as a "bucket", and try to put balanced number of
            pods into each bucket. It's a required field.
            
          • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
            the spread constraint. - DoNotSchedule (default) tells the scheduler not to
            schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
            any location, but giving higher precedence to topologies that would help
            reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
            pod if and only if every possible node assignment for that pod would
            violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
            MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
            | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
            DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
            3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
            other words, the cluster can still be imbalanced, but scheduler won't make
            it *more* imbalanced. It's a required field.
            
            
            
        • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
          More info: https://kubernetes.io/docs/concepts/storage/volumes
          
          Volume represents a named volume in a pod that may be accessed by any
          container in the pod.
          
          

          • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
            Represents a Persistent Disk resource in AWS.
            An AWS EBS disk must exist before mounting to a container. The disk must
            also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
            mounted as read/write once. AWS EBS volumes support ownership management
            and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty).
              
            • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
              "true". If omitted, the default is "false". More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
              info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
          • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            

            • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
              
            • diskName (string) The Name of the data disk in the blob storage
              
            • diskURI (string) The URI the data disk in the blob storage
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
              single blob disk per storage account Managed: azure managed data disk (only
              in managed availability set). defaults to shared
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
          • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            

            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretName (string) the name of secret that contains Azure Storage Account Name and Key
              
            • shareName (string) Share Name
              
          • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
            
            Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
              is /
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
              /etc/ceph/user.secret More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
              default is empty. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) Optional: User is the rados user name, default is admin More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
          • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
            machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
            
            Represents a cinder volume resource in Openstack. A Cinder volume must
            exist before mounting to a container. The volume must also be in the same
            region as the kubelet. Cinder volumes support ownership management and
            SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
              be "ext4" if unspecified. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • secretRef (Object) Optional: points to a secret object containing parameters used to connect
              to OpenStack.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeID (string) volume id used to identify the volume in cinder. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
          • configMap (Object) ConfigMap represents a configMap that should populate this volume
            
            Adapts a ConfigMap into a volume.
            The contents of the target ConfigMap's Data field will be presented in a
            volume as files using the keys in the Data field as the file names, unless
            the items element is populated with specific mappings of keys to paths.
            ConfigMap volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
            handled by certain external CSI drivers (Beta feature).
            
            Represents a source location of a volume to mount, managed by an external
            CSI driver
            
            

            • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
              your admin for the correct name as registered in the cluster.
              
            • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
              empty value is passed to the associated CSI driver which will determine the
              default filesystem to apply.
              
            • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
              sensitive information to pass to the CSI driver to complete the CSI
              NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
              and may be empty if no secret is required. If the secret object contains
              more than one secret, all secret references are passed.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
              (read/write).
              
            • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
              CSI driver. Consult your driver's documentation for supported values.
              
          • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
            volume
            
            DownwardAPIVolumeSource represents a volume containing downward API info.
            Downward API volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
              mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) Items is a list of downward API volume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
            Represents an empty directory for a pod. Empty directory volumes support
            ownership management and SELinux relabeling.
            
            

            • medium (string) What type of storage medium should back this directory. The default is ""
              which means to use the node's default medium. Must be an empty string
              (default) or Memory. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              
            • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
              limit is also applicable for memory medium. The maximum usage on memory
              medium EmptyDir would be the minimum value between the SizeLimit specified
              here and the sum of memory limits of all containers in a pod. The default
              is nil which means that the limit is undefined. More info:
              http://kubernetes.io/docs/user-guide/volumes#emptydir
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
            The volume's lifecycle is tied to the pod that defines it - it will be
            created before the pod starts, and deleted when the pod is removed.
            
            Use this if: a) the volume is only needed while the pod runs, b) features
            of normal volumes like restoring from snapshot or capacity tracking are
            needed, c) the storage driver is specified through a storage class, and d)
            the storage driver supports dynamic volume provisioning through a
            PersistentVolumeClaim (see EphemeralVolumeSource for more information on
            the connection between this volume type and PersistentVolumeClaim).
            
            Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
            that persist for longer than the lifecycle of an individual pod.
            
            Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
            to be used that way - see the documentation of the driver for more
            information.
            
            A pod can use both types of ephemeral volumes and persistent volumes at the
            same time.
            
            Represents an ephemeral volume that is handled by a normal storage driver.
            
            

            • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
              in which this EphemeralVolumeSource is embedded will be the owner of the
              PVC, i.e. the PVC will be deleted together with the pod. The name of the
              PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
              from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
              if the concatenated name is not valid for a PVC (for example, too long).
              
              An existing PVC with that name that is not owned by the pod will *not* be
              used for the pod to avoid using an unrelated volume by mistake. Starting
              the pod is then blocked until the unrelated PVC is removed. If such a
              pre-created PVC is meant to be used by the pod, the PVC has to updated with
              an owner reference to the pod once the pod exists. Normally this should not
              be necessary, but it may be useful when manually reconstructing a broken
              cluster.
              
              This field is read-only and no changes will be made by Kubernetes to the
              PVC after it has been created.
              
              Required, must not be nil.
              
              PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
              objects as part of an EphemeralVolumeSource.
              
              

              • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                creating it. No other fields are allowed and will be rejected during
                validation.
                
                ObjectMeta is metadata that all persisted resources must have, which
                includes all objects users must create.
                
                

                • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                  may be set by external tools to store and retrieve arbitrary metadata. They
                  are not queryable and should be preserved when modifying objects. More
                  info: http://kubernetes.io/docs/user-guide/annotations
                  
                • clusterName (string) The name of the cluster which the object belongs to. This is used to
                  distinguish resources with same name and namespace in different clusters.
                  This field is not set anywhere right now and apiserver is going to ignore
                  it if set in create or update request.
                  
                • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                  object was created. It is not guaranteed to be set in happens-before order
                  across separate operations. Clients may not set this value. It is
                  represented in RFC3339 form and is in UTC.
                  
                  Populated by the system. Read-only. Null for lists. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                  will be removed from the system. Only set when deletionTimestamp is also
                  set. May only be shortened. Read-only.
                  
                • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                  deleted. This field is set by the server when a graceful deletion is
                  requested by the user, and is not directly settable by a client. The
                  resource is expected to be deleted (no longer visible from resource lists,
                  and not reachable by name) after the time in this field, once the
                  finalizers list is empty. As long as the finalizers list contains items,
                  deletion is blocked. Once the deletionTimestamp is set, this value may not
                  be unset or be set further into the future, although it may be shortened or
                  the resource may be deleted prior to this time. For example, a user may
                  request that a pod is deleted in 30 seconds. The Kubelet will react by
                  sending a graceful termination signal to the containers in the pod. After
                  that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                  to the container and after cleanup, remove the pod from the API. In the
                  presence of network partitions, this object may still exist after this
                  timestamp, until an administrator or automated process can determine the
                  resource is fully terminated. If not set, graceful deletion of the object
                  has not been requested.
                  
                  Populated by the system when a graceful deletion is requested. Read-only.
                  More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                  an identifier for the responsible component that will remove the entry from
                  the list. If the deletionTimestamp of the object is non-nil, entries in
                  this list can only be removed. Finalizers may be processed and removed in
                  any order. Order is NOT enforced because it introduces significant risk of
                  stuck finalizers. finalizers is a shared field, any actor with permission
                  can reorder it. If the finalizer list is processed in order, then this can
                  lead to a situation in which the component responsible for the first
                  finalizer in the list is waiting for a signal (field value, external
                  system, or other) produced by a component responsible for a finalizer later
                  in the list, resulting in a deadlock. Without enforced ordering finalizers
                  are free to order amongst themselves and are not vulnerable to ordering
                  changes in the list.
                  
                • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                  unique name ONLY IF the Name field has not been provided. If this field is
                  used, the name returned to the client will be different than the name
                  passed. This value will also be combined with a unique suffix. The provided
                  value has the same validation rules as the Name field, and may be truncated
                  by the length of the suffix required to make the value unique on the
                  server.
                  
                  If this field is specified and the generated name exists, the server will
                  NOT return a 409 - instead, it will either return 201 Created or 500 with
                  Reason ServerTimeout indicating a unique name could not be found in the
                  time allotted, and the client should retry (optionally after the time
                  indicated in the Retry-After header).
                  
                  Applied only if Name is not specified. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                  
                • generation (integer) A sequence number representing a specific generation of the desired state.
                  Populated by the system. Read-only.
                  
                • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                  (scope and select) objects. May match selectors of replication controllers
                  and services. More info: http://kubernetes.io/docs/user-guide/labels
                  
                • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                  managed by that workflow. This is mostly for internal housekeeping, and
                  users typically shouldn't need to set or understand this field. A workflow
                  can be the user's name, a controller's name, or the name of a specific
                  apply path like "ci-cd". The set of fields is always in the version that
                  the workflow used when modifying the object.
                  
                  ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                  the resource that the fieldset applies to.
                  
                  

                  • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                    to. The format is "group/version" just like the top-level APIVersion field.
                    It is necessary to track the version of a field set because it cannot be
                    automatically converted.
                    
                  • fieldsType (string) FieldsType is the discriminator for the different fields format and
                    version. There is currently only one possible value: "FieldsV1"
                    
                  • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                    type.
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                  • manager (string) Manager is an identifier of the workflow managing these fields.
                    
                  • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                    being created. The only valid values for this field are 'Apply' and
                    'Update'.
                    
                  • subresource (string) Subresource is the name of the subresource used to update that object, or
                    empty string if the object was updated through the main resource. The value
                    of this field is used to distinguish between managers, even if they share
                    the same name. For example, a status update will be distinct from a regular
                    update using the same manager name. Note that the APIVersion field is not
                    related to the Subresource field and it always corresponds to the version
                    of the main resource.
                    
                  • time (string) Time is timestamp of when these fields were set. It should always be empty
                    if Operation is 'Apply'
                    
                    Time is a wrapper around time.Time which supports correct marshaling to
                    YAML and JSON. Wrappers are provided for many of the factory methods that
                    the time package offers.
                    
                • name (string) Name must be unique within a namespace. Is required when creating
                  resources, although some resources may allow a client to request the
                  generation of an appropriate name automatically. Name is primarily intended
                  for creation idempotence and configuration definition. Cannot be updated.
                  More info: http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • namespace (string) Namespace defines the space within which each name must be unique. An empty
                  namespace is equivalent to the "default" namespace, but "default" is the
                  canonical representation. Not all objects are required to be scoped to a
                  namespace - the value of this field for those objects will be empty.
                  
                  Must be a DNS_LABEL. Cannot be updated. More info:
                  http://kubernetes.io/docs/user-guide/namespaces
                  
                • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                  been deleted, this object will be garbage collected. If this object is
                  managed by a controller, then an entry in this list will point to this
                  controller, with the controller field set to true. There cannot be more
                  than one managing controller.
                  
                  OwnerReference contains enough information to let you identify an owning
                  object. An owning object must be in the same namespace as the dependent, or
                  be cluster-scoped, so there is no namespace field.
                  
                  

                  • apiVersion (string) API version of the referent.
                    
                  • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                    owner cannot be deleted from the key-value store until this reference is
                    removed. Defaults to false. To set this field, a user needs "delete"
                    permission of the owner, otherwise 422 (Unprocessable Entity) will be
                    returned.
                    
                  • controller (boolean) If true, this reference points to the managing controller.
                    
                  • kind (string) Kind of the referent. More info:
                    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    
                  • name (string) Name of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#names
                    
                  • uid (string) UID of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#uids
                    
                • resourceVersion (string) An opaque value that represents the internal version of this object that
                  can be used by clients to determine when objects have changed. May be used
                  for optimistic concurrency, change detection, and the watch operation on a
                  resource or set of resources. Clients must treat these values as opaque and
                  passed unmodified back to the server. They may only be valid for a
                  particular resource or set of resources.
                  
                  Populated by the system. Read-only. Value must be treated as opaque by
                  clients and . More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                  
                • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                  Read-only.
                  
                  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                  the field is planned to be removed in 1.21 release.
                  
                • uid (string) UID is the unique in time and space value for this object. It is typically
                  generated by the server on successful creation of a resource and is not
                  allowed to change on PUT operations.
                  
                  Populated by the system. Read-only. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                copied unchanged into the PVC that gets created from this template. The
                same fields as in a PersistentVolumeClaim are also valid here.
                
                PersistentVolumeClaimSpec describes the common attributes of storage
                devices and allows a Source for provider-specific attributes
                
                

                • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                  info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                  
                • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                  object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                  (PersistentVolumeClaim) If the provisioner or an external controller can
                  support the specified data source, it will create a new volume based on the
                  contents of the specified data source. If the AnyVolumeDataSource feature
                  gate is enabled, this field will always have the same contents as the
                  DataSourceRef field.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                  non-empty volume is desired. This may be any local object from a non-empty
                  API group (non core object) or a PersistentVolumeClaim object. When this
                  field is specified, volume binding will only succeed if the type of the
                  specified object matches some installed volume populator or dynamic
                  provisioner. This field will replace the functionality of the DataSource
                  field and as such if both fields are non-empty, they must have the same
                  value. For backwards compatibility, both fields (DataSource and
                  DataSourceRef) will be set to the same value automatically if one of them
                  is empty and the other is non-empty. There are two important differences
                  between DataSource and DataSourceRef: * While DataSource only allows two
                  specific types of objects, DataSourceRef allows any non-core object, as
                  well as PersistentVolumeClaim objects.
                  * While DataSource ignores disallowed values (dropping them), DataSourceRef
                  preserves all values, and generates an error if a disallowed value is
                  specified. (Alpha) Using this field requires the AnyVolumeDataSource
                  feature gate to be enabled.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • resources (Object) Resources represents the minimum resources the volume should have. If
                  RecoverVolumeExpansionFailure feature is enabled users are allowed to
                  specify resource requirements that are lower than previous value but must
                  still be higher than capacity recorded in the status field of the claim.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                  
                  ResourceRequirements describes the compute resource requirements.
                  
                  

                  • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                    Requests is omitted for a container, it defaults to Limits if that is
                    explicitly specified, otherwise to an implementation-defined value. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                • selector (Object) A label query over volumes to consider for binding.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • storageClassName (string) Name of the StorageClass required by the claim. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                  
                • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                  Filesystem is implied when not included in claim spec.
                  
                • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                  claim.
                  
          • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
            machine and then exposed to the pod.
            
            Represents a Fibre Channel volume. Fibre Channel volumes can only be
            mounted as read/write once. Fibre Channel volumes support ownership
            management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • lun (integer) Optional: FC target lun number
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
              
            • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
              combination of targetWWNs and lun must be set, but not both simultaneously.
              
          • flexVolume (Object) FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            

            • driver (string) Driver is the name of the driver to use for this volume.
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
              on FlexVolume script.
              
            • options (map[string]string) Optional: Extra command options if any.
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
              information to pass to the plugin scripts. This may be empty if no secret
              object is specified. If the secret object contains more than one secret,
              all secrets are passed to the plugin scripts.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
          • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
            This depends on the Flocker control service being running
            
            Represents a Flocker volume mounted by the Flocker agent. One and only one
            of datasetName and datasetUUID should be set. Flocker volumes do not
            support ownership management or SELinux relabeling.
            
            

            • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
              should be considered as deprecated
              
            • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
              
          • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
            Represents a Persistent Disk resource in Google Compute Engine.
            A GCE PD must exist before mounting to a container. The disk must also be
            in the same GCE project and zone as the kubelet. A GCE PD can only be
            mounted as read/write once or read-only many times. GCE PDs support
            ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty). More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
          • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
            GitRepo is deprecated. To provision a container with a git repo, mount an
            EmptyDir into an InitContainer that clones the repo using git, then mount
            the EmptyDir into the Pod's container.
            
            Represents a volume that is populated with the contents of a git
            repository. Git repo volumes do not support ownership management. Git repo
            volumes support SELinux relabeling.
            
            DEPRECATED: GitRepo is deprecated. To provision a container with a git
            repo, mount an EmptyDir into an InitContainer that clones the repo using
            git, then mount the EmptyDir into the Pod's container.
            
            

            • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
              supplied, the volume directory will be the git repository. Otherwise, if
              specified, the volume will contain the git repository in the subdirectory
              with the given name.
              
            • repository (string) Repository URL
              
            • revision (string) Commit hash for the specified revision.
              
          • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
            
            Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
              info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • path (string) Path is the Glusterfs volume path. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
              permissions. Defaults to false. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
          • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
            that is directly exposed to the container. This is generally used for
            system agents or other privileged things that are allowed to see the host
            machine. Most containers will NOT need this. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
            Represents a host path mapped into a pod. Host path volumes do not support
            ownership management or SELinux relabeling.
            
            

            • path (string) Path of the directory on the host. If the path is a symlink, it will follow
              the link to the real path. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
            • type (string) Type for HostPath Volume Defaults to "" More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
          • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
            host machine and then exposed to the pod. More info:
            https://examples.k8s.io/volumes/iscsi/README.md
            
            Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
            once. ISCSI volumes support ownership management and SELinux relabeling.
            
            

            • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
              
            • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
              
            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
              
            • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
              iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
              name) will be created for the connection.
              
            • iqn (string) Target iSCSI Qualified Name.
              
            • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
              (tcp).
              
            • lun (integer) iSCSI Target Lun number.
              
            • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
              port is other than default (typically TCP ports 860 and 3260).
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false.
              
            • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
              is other than default (typically TCP ports 860 and 3260).
              
          • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
            Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
            not support ownership management or SELinux relabeling.
            
            

            • path (string) Path that is exported by the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
              permissions. Defaults to false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • server (string) Server is the hostname or IP address of the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
          • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
            PersistentVolumeClaim in the same namespace. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
            PersistentVolumeClaimVolumeSource references the user's PVC in the same
            namespace. This volume finds the bound PV and mounts that volume for the
            pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
            another type of volume that is owned by someone else (the system).
            
            

            • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
              the pod using this volume. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
              
            • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
              
          • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
            and mounted on kubelets host machine
            
            Represents a Photon Controller persistent disk resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • pdID (string) ID that identifies Photon Controller persistent disk
              
          • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
            kubelets host machine
            
            PortworxVolumeSource represents a Portworx volume resource.
            
            

            • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
              supported by the host operating system. Ex. "ext4", "xfs". Implicitly
              inferred to be "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • volumeID (string) VolumeID uniquely identifies a Portworx volume
              
          • projected (Object) Items for all in one resources secrets, configmaps, and downward API
            
            Represents a projected volume source
            
            

            • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Directories within the path are not affected by this
              setting. This might be in conflict with other options that affect the file
              mode, like fsGroup, and the result can be other mode bits set.
              
            • sources ([]Object) list of volume projections
              
              Projection that may be projected along with other supported volume types
              
              

              • configMap (Object) information about the configMap data to project
                
                Adapts a ConfigMap into a projected volume.
                The contents of the target ConfigMap's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names, unless the items element is populated with specific mappings of keys
                to paths. Note that this is identical to a configmap volume source without
                the default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • downwardAPI (Object) information about the downwardAPI data to project
                
                Represents downward API info for projecting into a projected volume. Note
                that this is identical to a downwardAPI volume source without the default
                mode.
                
                

                • items ([]Object) Items is a list of DownwardAPIVolume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • secret (Object) information about the secret data to project
                
                Adapts a secret into a projected volume.
                The contents of the target Secret's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names. Note that this is identical to a secret volume source without the
                default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
              • serviceAccountToken (Object) information about the serviceAccountToken data to project
                
                ServiceAccountTokenProjection represents a projected service account token
                volume. This projection can be used to insert a service account token into
                the pods runtime filesystem for use against APIs (Kubernetes API Server or
                otherwise).
                
                

                • audience (string) Audience is the intended audience of the token. A recipient of a token must
                  identify itself with an identifier specified in the audience of the token,
                  and otherwise should reject the token. The audience defaults to the
                  identifier of the apiserver.
                  
                • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                  account token. As the token approaches expiration, the kubelet volume
                  plugin will proactively rotate the service account token. The kubelet will
                  start trying to rotate the token if the token is older than 80 percent of
                  its time to live or if the token is older than 24 hours.Defaults to 1 hour
                  and must be at least 10 minutes.
                  
                • path (string) Path is the path relative to the mount point of the file to project the
                  token into.
                  
          • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
            
            Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
            volumes do not support ownership management or SELinux relabeling.
            
            

            • group (string) Group to map volume access to Default is no group
              
            • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
              permissions. Defaults to false.
              
            • registry (string) Registry represents a single or multiple Quobyte Registry services
              specified as a string as host:port pair (multiple entries are separated
              with commas) which acts as the central registry for volumes
              
            • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
              provisioned Quobyte volumes, value is set by the plugin
              
            • user (string) User to map volume access to Defaults to serivceaccount user
              
            • volume (string) Volume is a string that references an already created Quobyte volume by
              name.
              
          • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
            
            Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
            volumes support ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
              
            • image (string) The rados image name. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
              More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • monitors ([]string) A collection of Ceph monitors. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • pool (string) The rados pool name. Default is rbd. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
              overrides keyring. Default is nil. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) The rados user name. Default is admin. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
          • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
            Kubernetes nodes.
            
            ScaleIOVolumeSource represents a persistent ScaleIO volume
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
              
            • gateway (string) The host address of the ScaleIO API Gateway.
              
            • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
              information. If this is not provided, Login operation will fail.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
              
            • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
              ThinProvisioned. Default is ThinProvisioned.
              
            • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
              
            • system (string) The name of the storage system as configured in ScaleIO.
              
            • volumeName (string) The name of a volume already created in the ScaleIO system that is
              associated with this volume source.
              
          • secret (Object) Secret represents a secret that should populate this volume. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
            Adapts a Secret into a volume.
            The contents of the target Secret's Data field will be presented in a
            volume as files using the keys in the Data field as the file names. Secret
            volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • optional (boolean) Specify whether the Secret or its keys must be defined
              
            • secretName (string) Name of the secret in the pod's namespace to use. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#secret
              
          • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
            nodes.
            
            Represents a StorageOS persistent volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
              credentials. If not specified, default values will be attempted.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
              are only unique within a namespace.
              
            • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
              namespace is specified then the Pod's namespace will be used. This allows
              the Kubernetes name scoping to be mirrored within StorageOS for tighter
              integration. Set VolumeName to any name to override the default behaviour.
              Set to "default" if you are not using namespaces within StorageOS.
              Namespaces that do not pre-exist within StorageOS will be created.
              
          • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
            host machine
            
            Represents a vSphere volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
              StoragePolicyName.
              
            • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
              
            • volumePath (string) Path that identifies vSphere volume vmdk
              
  • status (Object) Most recently observed status of the Deployment.
    
    DeploymentStatus is the most recently observed status of the Deployment.
    
    

    • availableReplicas (integer) Total number of available pods (ready for at least minReadySeconds)
      targeted by this deployment.
      
    • collisionCount (integer) Count of hash collisions for the Deployment. The Deployment controller uses
      this field as a collision avoidance mechanism when it needs to create the
      name for the newest ReplicaSet.
      
    • conditions ([]Object) Represents the latest available observations of a deployment's current
      state.
      
      DeploymentCondition describes the state of a deployment at a certain point.
      
      

      • lastTransitionTime (string) Last time the condition transitioned from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • lastUpdateTime (string) The last time this condition was updated.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) A human readable message indicating details about the transition.
        
      • reason (string) The reason for the condition's last transition.
        
      • status (string) Status of the condition, one of True, False, Unknown.
        
      • type (string) Type of deployment condition.
        
    • observedGeneration (integer) The generation observed by the deployment controller.
      
    • readyReplicas (integer) readyReplicas is the number of pods targeted by this Deployment with a
      Ready Condition.
      
    • replicas (integer) Total number of non-terminated pods targeted by this deployment (their
      labels match the selector).
      
    • unavailableReplicas (integer) Total number of unavailable pods targeted by this deployment. This is the
      total number of pods that are still required for the deployment to have
      100%!a(MISSING)vailable capacity. They may either be pods that are running
      but not yet available or pods that still have not been created.
      
    • updatedReplicas (integer) Total number of non-terminated pods targeted by this deployment that have
      the desired template spec.
      
• ReplicaSet ReplicaSet ensures that a specified number of pod replicas are running at
  any given time.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) If the Labels of a ReplicaSet are empty, they are defaulted to be the same
    as the Pod(s) that the ReplicaSet manages. Standard object's metadata. More
    info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Spec defines the specification of the desired behavior of the ReplicaSet.
    More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    ReplicaSetSpec is the specification of a ReplicaSet.
    
    

    • minReadySeconds (integer) Minimum number of seconds for which a newly created pod should be ready
      without any of its container crashing, for it to be considered available.
      Defaults to 0 (pod will be considered available as soon as it is ready)
      
    • replicas (integer) Replicas is the number of desired replicas. This is a pointer to
      distinguish between explicit zero and unspecified. Defaults to 1. More
      info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller
      
    • selector (Object) Selector is a label query over pods that should match the replica count.
      Label keys and values that must match in order to be controlled by this
      replica set. It must match the pod template's labels. More info:
      https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
      
      A label selector is a label query over a set of resources. The result of
      matchLabels and matchExpressions are ANDed. An empty label selector matches
      all objects. A null label selector matches no objects.
      
      

      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
        are ANDed.
        
        A label selector requirement is a selector that contains values, a key, and
        an operator that relates the key and values.
        
        

        • key (string) key is the label key that the selector applies to.
          
        • operator (string) operator represents a key's relationship to a set of values. Valid
          operators are In, NotIn, Exists and DoesNotExist.
          
        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
          values array must be non-empty. If the operator is Exists or DoesNotExist,
          the values array must be empty. This array is replaced during a strategic
          merge patch.
          
      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
        matchLabels map is equivalent to an element of matchExpressions, whose key
        field is "key", the operator is "In", and the values array contains only
        "value". The requirements are ANDed.
        
    • template (Object) Template is the object that describes the pod that will be created if
      insufficient replicas are detected. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
      
      PodTemplateSpec describes the data a pod should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the pod. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        PodSpec is a description of a pod.
        
        

        • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
          StartTime before the system will actively try to mark it failed and kill
          associated containers. Value must be a positive integer.
          
        • affinity (Object) If specified, the pod's scheduling constraints
          
          Affinity is a group of affinity scheduling rules.
          
          

          • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
            
            Node affinity is a group of node affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node matches
              the corresponding matchExpressions; the node(s) with the highest sum are
              the most preferred.
              
              An empty preferred scheduling term matches all objects with implicit weight
              0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
              (i.e. is also a no-op).
              
              

              • preference (Object) A node selector term, associated with the corresponding weight.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
              • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to an update), the system may or may not try
              to eventually evict the pod from its node.
              
              A node selector represents the union of the results of one or more label
              queries over a set of nodes; that is, it represents the OR of the selectors
              represented by the node selector terms.
              
              

              • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
          • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
            same node, zone, etc. as some other pod(s)).
            
            Pod affinity is a group of inter pod affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node has pods
              which matches the corresponding podAffinityTerm; the node(s) with the
              highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to a pod label update), the system may or
              may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
          • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
            in the same node, zone, etc. as some other pod(s)).
            
            Pod anti affinity is a group of inter pod anti affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              anti-affinity expressions specified by this field, but it may choose a node
              that violates one or more of the expressions. The node that is most
              preferred is the one with the greatest sum of weights, i.e. for each node
              that meets all of the scheduling requirements (resource request,
              requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
              iterating through the elements of this field and adding "weight" to the sum
              if the node has pods which matches the corresponding podAffinityTerm; the
              node(s) with the highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              anti-affinity requirements specified by this field cease to be met at some
              point during pod execution (e.g. due to a pod label update), the system may
              or may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
        • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
          should be automatically mounted.
          
        • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
          added or removed. There must be at least one container in a Pod. Cannot be
          updated.
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
          merged to the generated DNS configuration based on DNSPolicy.
          
          PodDNSConfig defines the DNS parameters of a pod in addition to those
          generated from DNSPolicy.
          
          

          • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
            nameservers generated from DNSPolicy. Duplicated nameservers will be
            removed.
            
          • options ([]Object) A list of DNS resolver options. This will be merged with the base options
            generated from DNSPolicy. Duplicated entries will be removed. Resolution
            options given in Options will override those that appear in the base
            DNSPolicy.
            
            PodDNSConfigOption defines DNS resolver options of a pod.
            
            

            • name (string) Required.
              
            • value (string) (empty)
              
          • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
            the base search paths generated from DNSPolicy. Duplicated search paths
            will be removed.
            
        • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
          'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
          parameters given in DNSConfig will be merged with the policy selected with
          DNSPolicy. To have DNS options set along with hostNetwork, you have to
          specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
          
          
          
        • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
          injected into pod's environment variables, matching the syntax of Docker
          links. Optional: Defaults to true.
          
        • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
          run in an existing pod to perform user-initiated actions such as debugging.
          This list cannot be specified when creating a pod, and it cannot be
          modified by updating the pod spec. In order to add an ephemeral container
          to an existing pod, use the pod's ephemeralcontainers subresource. This
          field is beta-level and available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          An EphemeralContainer is a temporary container that you may add to an
          existing Pod for user-initiated activities such as debugging. Ephemeral
          containers have no resource or scheduling guarantees, and they will not be
          restarted when they exit or when a Pod is removed or restarted. The kubelet
          may evict a Pod if an ephemeral container causes the Pod to exceed its
          resource allocation.
          
          To add an ephemeral container, use the ephemeralcontainers subresource of
          an existing Pod. Ephemeral containers may not be removed or restarted.
          
          This is a beta feature available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
            unique among all containers, init containers and ephemeral containers.
            
          • ports ([]Object) Ports are not allowed for ephemeral containers.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
            use spare resources already allocated to the pod.
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
            container should be run with. If set, the fields of SecurityContext
            override the equivalent fields of PodSecurityContext.
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
            container targets. The ephemeral container will be run in the namespaces
            (IPC, PID, etc) of this container. If not set then the ephemeral container
            uses the namespaces configured in the Pod spec.
            
            The container runtime must implement support for this feature. If the
            runtime does not support namespace targeting then the result of setting
            this field is undefined.
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
            not allowed for ephemeral containers. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
          the pod's hosts file if specified. This is only valid for non-hostNetwork
          pods.
          
          HostAlias holds the mapping between IP and hostnames that will be injected
          as an entry in the pod's hosts file.
          
          

          • hostnames ([]string) Hostnames for the above IP address.
            
          • ip (string) IP address of the host file entry.
            
        • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
          
        • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
          If this option is set, the ports that will be used must be specified.
          Default to false.
          
        • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
          
        • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
          be set to a system-defined value.
          
        • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
          namespace to use for pulling any of the images used by this PodSpec. If
          specified, these secrets will be passed to individual puller
          implementations for them to use. For example, in the case of docker, only
          DockerConfig type secrets are honored. More info:
          https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
          executed in order prior to containers being started. If any init container
          fails, the pod is considered to have failed and is handled according to its
          restartPolicy. The name for an init container or normal container must be
          unique among all containers. Init containers may not have Lifecycle
          actions, Readiness probes, Liveness probes, or Startup probes. The
          resourceRequirements of an init container are taken into account during
          scheduling by finding the highest request/limit for each resource type, and
          then using the max of of that value or the sum of the normal containers.
          Limits are applied to init containers in a similar fashion. Init containers
          cannot currently be added or removed. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
          non-empty, the scheduler simply schedules this pod onto that node, assuming
          that it fits resource requirements.
          
        • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
          Selector which must match a node's labels for the pod to be scheduled on
          that node. More info:
          https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
          
        • os (Object) Specifies the OS of the containers in the pod. Some pod and container
          fields are restricted if this is set.
          
          If the OS field is set to linux, the following fields must be unset:
          -securityContext.windowsOptions
          
          If the OS field is set to windows, following fields must be unset: -
          spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
          spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
          spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
          spec.shareProcessNamespace - spec.securityContext.runAsUser -
          spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
          spec.containers[*].securityContext.seLinuxOptions -
          spec.containers[*].securityContext.seccompProfile -
          spec.containers[*].securityContext.capabilities -
          spec.containers[*].securityContext.readOnlyRootFilesystem -
          spec.containers[*].securityContext.privileged -
          spec.containers[*].securityContext.allowPrivilegeEscalation -
          spec.containers[*].securityContext.procMount -
          spec.containers[*].securityContext.runAsUser -
          spec.containers[*].securityContext.runAsGroup This is an alpha field and
          requires the IdentifyPodOS feature
          
          PodOS defines the OS parameters of a pod.
          
          

          • name (string) Name is the name of the operating system. The currently supported values
            are linux and windows. Additional value may be defined in future and can be
            one of:
            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
            Clients should expect to handle additional values and treat unrecognized
            values in this field as os: null
            
        • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
          a given RuntimeClass. This field will be autopopulated at admission time by
          the RuntimeClass admission controller. If the RuntimeClass admission
          controller is enabled, overhead must not be set in Pod create requests. The
          RuntimeClass admission controller will reject Pod create requests which
          have the overhead already set. If RuntimeClass is configured and selected
          in the PodSpec, Overhead will be set to the value defined in the
          corresponding RuntimeClass, otherwise it will remain unset and treated as
          zero. More info:
          https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
          This field is beta-level as of Kubernetes v1.18, and is only honored by
          servers that enable the PodOverhead feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
          of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
          This field is beta-level, gated by the NonPreemptingPriority feature-gate.
          
        • priority (integer) The priority value. Various system components use this field to find the
          priority of the pod. When Priority Admission Controller is enabled, it
          prevents users from setting this field. The admission controller populates
          this field from PriorityClassName. The higher the value, the higher the
          priority.
          
        • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
          "system-cluster-critical" are two special keywords which indicate the
          highest priorities with the former being the highest priority. Any other
          name must be defined by creating a PriorityClass object with that name. If
          not specified, the pod priority will be default or zero if there is no
          default.
          
        • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
          pod is ready when all its containers are ready AND all conditions specified
          in the readiness gates have status equal to "True" More info:
          https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
          
          PodReadinessGate contains the reference to a pod condition
          
          

          • conditionType (string) ConditionType refers to a condition in the pod's condition list with
            matching type.
            
            
            
        • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
          Never. Default to Always. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
          
          
          
        • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
          which should be used to run this pod. If no RuntimeClass resource matches
          the named class, the pod will not be run. If unset or empty, the "legacy"
          RuntimeClass will be used, which is an implicit class with an empty
          definition that uses the default runtime handler. More info:
          https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
          beta feature as of Kubernetes v1.14.
          
        • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
          specified, the pod will be dispatched by default scheduler.
          
        • securityContext (Object) SecurityContext holds pod-level security attributes and common container
          settings. Optional: Defaults to empty. See type description for default
          values of each field.
          
          PodSecurityContext holds pod-level security attributes and common container
          settings. Some fields are also present in container.securityContext. Field
          values of container.securityContext take precedence over field values of
          PodSecurityContext.
          
          

          • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
            volume types allow the Kubelet to change the ownership of that volume to be
            owned by the pod:
            
            1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
            created in the volume will be owned by FSGroup) 3. The permission bits are
            OR'd with rw-rw----
            
            If unset, the Kubelet will not modify the ownership and permissions of any
            volume. Note that this field cannot be set when spec.os.name is windows.
            
          • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
            of the volume before being exposed inside Pod. This field will only apply
            to volume types which support fsGroup based ownership(and permissions). It
            will have no effect on ephemeral volume types such as: secret, configmaps
            and emptydir. Valid values are "OnRootMismatch" and "Always". If not
            specified, "Always" is used. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence for that container.
            Note that this field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
            field cannot be set when spec.os.name is windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
            addition to the container's primary GID. If unspecified, no groups will be
            added to any container. Note that this field cannot be set when
            spec.os.name is windows.
            
          • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
            unsupported sysctls (by the container runtime) might fail to launch. Note
            that this field cannot be set when spec.os.name is windows.
            
            Sysctl defines a kernel parameter to be set
            
            

            • name (string) Name of a property to set
              
            • value (string) Value of a property to set
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options within a container's SecurityContext will be used. If set in
            both SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
          Deprecated: Use serviceAccountName instead.
          
        • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
          pod. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
          
        • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
          than the leaf name (the default). In Linux containers, this means setting
          the FQDN in the hostname field of the kernel (the nodename field of struct
          utsname). In Windows containers, this means setting the registry value of
          hostname for the registry key
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
          FQDN. If a pod does not have FQDN, this has no effect. Default to false.
          
        • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
          When this is set containers will be able to view and signal processes from
          other containers in the same pod, and the first process in each container
          will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
          be set. Optional: Default to false.
          
        • subdomain (string) If specified, the fully qualified Pod hostname will be
          "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
          specified, the pod will not have a domainname at all.
          
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
          decreased in delete request. Value must be non-negative integer. The value
          zero indicates stop immediately via the kill signal (no opportunity to shut
          down). If this value is nil, the default grace period will be used instead.
          The grace period is the duration in seconds after the processes running in
          the pod are sent a termination signal and the time when the processes are
          forcibly halted with a kill signal. Set this value longer than the expected
          cleanup time for your process. Defaults to 30 seconds.
          
        • tolerations ([]Object) If specified, the pod's tolerations.
          
          The pod this Toleration is attached to tolerates any taint that matches the
          triple (key,value,effect) using the matching operator (operator).
          
          

          • effect (string) Effect indicates the taint effect to match. Empty means match all taint
            effects. When specified, allowed values are NoSchedule, PreferNoSchedule
            and NoExecute.
            
            
            
          • key (string) Key is the taint key that the toleration applies to. Empty means match all
            taint keys. If the key is empty, operator must be Exists; this combination
            means to match all values and all keys.
            
          • operator (string) Operator represents a key's relationship to the value. Valid operators are
            Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
            value, so that a pod can tolerate all taints of a particular category.
            
            
            
          • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
            be of effect NoExecute, otherwise this field is ignored) tolerates the
            taint. By default, it is not set, which means tolerate the taint forever
            (do not evict). Zero and negative values will be treated as 0 (evict
            immediately) by the system.
            
          • value (string) Value is the taint value the toleration matches to. If the operator is
            Exists, the value should be empty, otherwise just a regular string.
            
        • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
          across topology domains. Scheduler will schedule pods in a way which abides
          by the constraints. All topologySpreadConstraints are ANDed.
          
          TopologySpreadConstraint specifies how to spread matching pods among the
          given topology.
          
          

          • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
            selector are counted to determine the number of pods in their corresponding
            topology domain.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
            When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
            difference between the number of matching pods in the target topology and
            the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
            and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
            zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
            to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
            ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
            incoming pod can be scheduled onto any zone. When
            `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
            topologies that satisfy it. It's a required field. Default value is 1 and 0
            is not allowed.
            
          • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
            key and identical values are considered to be in the same topology. We
            consider each (key, value) as a "bucket", and try to put balanced number of
            pods into each bucket. It's a required field.
            
          • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
            the spread constraint. - DoNotSchedule (default) tells the scheduler not to
            schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
            any location, but giving higher precedence to topologies that would help
            reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
            pod if and only if every possible node assignment for that pod would
            violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
            MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
            | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
            DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
            3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
            other words, the cluster can still be imbalanced, but scheduler won't make
            it *more* imbalanced. It's a required field.
            
            
            
        • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
          More info: https://kubernetes.io/docs/concepts/storage/volumes
          
          Volume represents a named volume in a pod that may be accessed by any
          container in the pod.
          
          

          • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
            Represents a Persistent Disk resource in AWS.
            An AWS EBS disk must exist before mounting to a container. The disk must
            also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
            mounted as read/write once. AWS EBS volumes support ownership management
            and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty).
              
            • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
              "true". If omitted, the default is "false". More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
              info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
          • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            

            • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
              
            • diskName (string) The Name of the data disk in the blob storage
              
            • diskURI (string) The URI the data disk in the blob storage
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
              single blob disk per storage account Managed: azure managed data disk (only
              in managed availability set). defaults to shared
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
          • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            

            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretName (string) the name of secret that contains Azure Storage Account Name and Key
              
            • shareName (string) Share Name
              
          • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
            
            Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
              is /
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
              /etc/ceph/user.secret More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
              default is empty. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) Optional: User is the rados user name, default is admin More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
          • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
            machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
            
            Represents a cinder volume resource in Openstack. A Cinder volume must
            exist before mounting to a container. The volume must also be in the same
            region as the kubelet. Cinder volumes support ownership management and
            SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
              be "ext4" if unspecified. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • secretRef (Object) Optional: points to a secret object containing parameters used to connect
              to OpenStack.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeID (string) volume id used to identify the volume in cinder. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
          • configMap (Object) ConfigMap represents a configMap that should populate this volume
            
            Adapts a ConfigMap into a volume.
            The contents of the target ConfigMap's Data field will be presented in a
            volume as files using the keys in the Data field as the file names, unless
            the items element is populated with specific mappings of keys to paths.
            ConfigMap volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
            handled by certain external CSI drivers (Beta feature).
            
            Represents a source location of a volume to mount, managed by an external
            CSI driver
            
            

            • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
              your admin for the correct name as registered in the cluster.
              
            • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
              empty value is passed to the associated CSI driver which will determine the
              default filesystem to apply.
              
            • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
              sensitive information to pass to the CSI driver to complete the CSI
              NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
              and may be empty if no secret is required. If the secret object contains
              more than one secret, all secret references are passed.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
              (read/write).
              
            • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
              CSI driver. Consult your driver's documentation for supported values.
              
          • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
            volume
            
            DownwardAPIVolumeSource represents a volume containing downward API info.
            Downward API volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
              mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) Items is a list of downward API volume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
            Represents an empty directory for a pod. Empty directory volumes support
            ownership management and SELinux relabeling.
            
            

            • medium (string) What type of storage medium should back this directory. The default is ""
              which means to use the node's default medium. Must be an empty string
              (default) or Memory. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              
            • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
              limit is also applicable for memory medium. The maximum usage on memory
              medium EmptyDir would be the minimum value between the SizeLimit specified
              here and the sum of memory limits of all containers in a pod. The default
              is nil which means that the limit is undefined. More info:
              http://kubernetes.io/docs/user-guide/volumes#emptydir
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
            The volume's lifecycle is tied to the pod that defines it - it will be
            created before the pod starts, and deleted when the pod is removed.
            
            Use this if: a) the volume is only needed while the pod runs, b) features
            of normal volumes like restoring from snapshot or capacity tracking are
            needed, c) the storage driver is specified through a storage class, and d)
            the storage driver supports dynamic volume provisioning through a
            PersistentVolumeClaim (see EphemeralVolumeSource for more information on
            the connection between this volume type and PersistentVolumeClaim).
            
            Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
            that persist for longer than the lifecycle of an individual pod.
            
            Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
            to be used that way - see the documentation of the driver for more
            information.
            
            A pod can use both types of ephemeral volumes and persistent volumes at the
            same time.
            
            Represents an ephemeral volume that is handled by a normal storage driver.
            
            

            • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
              in which this EphemeralVolumeSource is embedded will be the owner of the
              PVC, i.e. the PVC will be deleted together with the pod. The name of the
              PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
              from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
              if the concatenated name is not valid for a PVC (for example, too long).
              
              An existing PVC with that name that is not owned by the pod will *not* be
              used for the pod to avoid using an unrelated volume by mistake. Starting
              the pod is then blocked until the unrelated PVC is removed. If such a
              pre-created PVC is meant to be used by the pod, the PVC has to updated with
              an owner reference to the pod once the pod exists. Normally this should not
              be necessary, but it may be useful when manually reconstructing a broken
              cluster.
              
              This field is read-only and no changes will be made by Kubernetes to the
              PVC after it has been created.
              
              Required, must not be nil.
              
              PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
              objects as part of an EphemeralVolumeSource.
              
              

              • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                creating it. No other fields are allowed and will be rejected during
                validation.
                
                ObjectMeta is metadata that all persisted resources must have, which
                includes all objects users must create.
                
                

                • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                  may be set by external tools to store and retrieve arbitrary metadata. They
                  are not queryable and should be preserved when modifying objects. More
                  info: http://kubernetes.io/docs/user-guide/annotations
                  
                • clusterName (string) The name of the cluster which the object belongs to. This is used to
                  distinguish resources with same name and namespace in different clusters.
                  This field is not set anywhere right now and apiserver is going to ignore
                  it if set in create or update request.
                  
                • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                  object was created. It is not guaranteed to be set in happens-before order
                  across separate operations. Clients may not set this value. It is
                  represented in RFC3339 form and is in UTC.
                  
                  Populated by the system. Read-only. Null for lists. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                  will be removed from the system. Only set when deletionTimestamp is also
                  set. May only be shortened. Read-only.
                  
                • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                  deleted. This field is set by the server when a graceful deletion is
                  requested by the user, and is not directly settable by a client. The
                  resource is expected to be deleted (no longer visible from resource lists,
                  and not reachable by name) after the time in this field, once the
                  finalizers list is empty. As long as the finalizers list contains items,
                  deletion is blocked. Once the deletionTimestamp is set, this value may not
                  be unset or be set further into the future, although it may be shortened or
                  the resource may be deleted prior to this time. For example, a user may
                  request that a pod is deleted in 30 seconds. The Kubelet will react by
                  sending a graceful termination signal to the containers in the pod. After
                  that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                  to the container and after cleanup, remove the pod from the API. In the
                  presence of network partitions, this object may still exist after this
                  timestamp, until an administrator or automated process can determine the
                  resource is fully terminated. If not set, graceful deletion of the object
                  has not been requested.
                  
                  Populated by the system when a graceful deletion is requested. Read-only.
                  More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                  an identifier for the responsible component that will remove the entry from
                  the list. If the deletionTimestamp of the object is non-nil, entries in
                  this list can only be removed. Finalizers may be processed and removed in
                  any order. Order is NOT enforced because it introduces significant risk of
                  stuck finalizers. finalizers is a shared field, any actor with permission
                  can reorder it. If the finalizer list is processed in order, then this can
                  lead to a situation in which the component responsible for the first
                  finalizer in the list is waiting for a signal (field value, external
                  system, or other) produced by a component responsible for a finalizer later
                  in the list, resulting in a deadlock. Without enforced ordering finalizers
                  are free to order amongst themselves and are not vulnerable to ordering
                  changes in the list.
                  
                • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                  unique name ONLY IF the Name field has not been provided. If this field is
                  used, the name returned to the client will be different than the name
                  passed. This value will also be combined with a unique suffix. The provided
                  value has the same validation rules as the Name field, and may be truncated
                  by the length of the suffix required to make the value unique on the
                  server.
                  
                  If this field is specified and the generated name exists, the server will
                  NOT return a 409 - instead, it will either return 201 Created or 500 with
                  Reason ServerTimeout indicating a unique name could not be found in the
                  time allotted, and the client should retry (optionally after the time
                  indicated in the Retry-After header).
                  
                  Applied only if Name is not specified. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                  
                • generation (integer) A sequence number representing a specific generation of the desired state.
                  Populated by the system. Read-only.
                  
                • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                  (scope and select) objects. May match selectors of replication controllers
                  and services. More info: http://kubernetes.io/docs/user-guide/labels
                  
                • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                  managed by that workflow. This is mostly for internal housekeeping, and
                  users typically shouldn't need to set or understand this field. A workflow
                  can be the user's name, a controller's name, or the name of a specific
                  apply path like "ci-cd". The set of fields is always in the version that
                  the workflow used when modifying the object.
                  
                  ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                  the resource that the fieldset applies to.
                  
                  

                  • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                    to. The format is "group/version" just like the top-level APIVersion field.
                    It is necessary to track the version of a field set because it cannot be
                    automatically converted.
                    
                  • fieldsType (string) FieldsType is the discriminator for the different fields format and
                    version. There is currently only one possible value: "FieldsV1"
                    
                  • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                    type.
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                  • manager (string) Manager is an identifier of the workflow managing these fields.
                    
                  • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                    being created. The only valid values for this field are 'Apply' and
                    'Update'.
                    
                  • subresource (string) Subresource is the name of the subresource used to update that object, or
                    empty string if the object was updated through the main resource. The value
                    of this field is used to distinguish between managers, even if they share
                    the same name. For example, a status update will be distinct from a regular
                    update using the same manager name. Note that the APIVersion field is not
                    related to the Subresource field and it always corresponds to the version
                    of the main resource.
                    
                  • time (string) Time is timestamp of when these fields were set. It should always be empty
                    if Operation is 'Apply'
                    
                    Time is a wrapper around time.Time which supports correct marshaling to
                    YAML and JSON. Wrappers are provided for many of the factory methods that
                    the time package offers.
                    
                • name (string) Name must be unique within a namespace. Is required when creating
                  resources, although some resources may allow a client to request the
                  generation of an appropriate name automatically. Name is primarily intended
                  for creation idempotence and configuration definition. Cannot be updated.
                  More info: http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • namespace (string) Namespace defines the space within which each name must be unique. An empty
                  namespace is equivalent to the "default" namespace, but "default" is the
                  canonical representation. Not all objects are required to be scoped to a
                  namespace - the value of this field for those objects will be empty.
                  
                  Must be a DNS_LABEL. Cannot be updated. More info:
                  http://kubernetes.io/docs/user-guide/namespaces
                  
                • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                  been deleted, this object will be garbage collected. If this object is
                  managed by a controller, then an entry in this list will point to this
                  controller, with the controller field set to true. There cannot be more
                  than one managing controller.
                  
                  OwnerReference contains enough information to let you identify an owning
                  object. An owning object must be in the same namespace as the dependent, or
                  be cluster-scoped, so there is no namespace field.
                  
                  

                  • apiVersion (string) API version of the referent.
                    
                  • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                    owner cannot be deleted from the key-value store until this reference is
                    removed. Defaults to false. To set this field, a user needs "delete"
                    permission of the owner, otherwise 422 (Unprocessable Entity) will be
                    returned.
                    
                  • controller (boolean) If true, this reference points to the managing controller.
                    
                  • kind (string) Kind of the referent. More info:
                    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    
                  • name (string) Name of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#names
                    
                  • uid (string) UID of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#uids
                    
                • resourceVersion (string) An opaque value that represents the internal version of this object that
                  can be used by clients to determine when objects have changed. May be used
                  for optimistic concurrency, change detection, and the watch operation on a
                  resource or set of resources. Clients must treat these values as opaque and
                  passed unmodified back to the server. They may only be valid for a
                  particular resource or set of resources.
                  
                  Populated by the system. Read-only. Value must be treated as opaque by
                  clients and . More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                  
                • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                  Read-only.
                  
                  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                  the field is planned to be removed in 1.21 release.
                  
                • uid (string) UID is the unique in time and space value for this object. It is typically
                  generated by the server on successful creation of a resource and is not
                  allowed to change on PUT operations.
                  
                  Populated by the system. Read-only. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                copied unchanged into the PVC that gets created from this template. The
                same fields as in a PersistentVolumeClaim are also valid here.
                
                PersistentVolumeClaimSpec describes the common attributes of storage
                devices and allows a Source for provider-specific attributes
                
                

                • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                  info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                  
                • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                  object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                  (PersistentVolumeClaim) If the provisioner or an external controller can
                  support the specified data source, it will create a new volume based on the
                  contents of the specified data source. If the AnyVolumeDataSource feature
                  gate is enabled, this field will always have the same contents as the
                  DataSourceRef field.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                  non-empty volume is desired. This may be any local object from a non-empty
                  API group (non core object) or a PersistentVolumeClaim object. When this
                  field is specified, volume binding will only succeed if the type of the
                  specified object matches some installed volume populator or dynamic
                  provisioner. This field will replace the functionality of the DataSource
                  field and as such if both fields are non-empty, they must have the same
                  value. For backwards compatibility, both fields (DataSource and
                  DataSourceRef) will be set to the same value automatically if one of them
                  is empty and the other is non-empty. There are two important differences
                  between DataSource and DataSourceRef: * While DataSource only allows two
                  specific types of objects, DataSourceRef allows any non-core object, as
                  well as PersistentVolumeClaim objects.
                  * While DataSource ignores disallowed values (dropping them), DataSourceRef
                  preserves all values, and generates an error if a disallowed value is
                  specified. (Alpha) Using this field requires the AnyVolumeDataSource
                  feature gate to be enabled.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • resources (Object) Resources represents the minimum resources the volume should have. If
                  RecoverVolumeExpansionFailure feature is enabled users are allowed to
                  specify resource requirements that are lower than previous value but must
                  still be higher than capacity recorded in the status field of the claim.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                  
                  ResourceRequirements describes the compute resource requirements.
                  
                  

                  • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                    Requests is omitted for a container, it defaults to Limits if that is
                    explicitly specified, otherwise to an implementation-defined value. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                • selector (Object) A label query over volumes to consider for binding.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • storageClassName (string) Name of the StorageClass required by the claim. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                  
                • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                  Filesystem is implied when not included in claim spec.
                  
                • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                  claim.
                  
          • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
            machine and then exposed to the pod.
            
            Represents a Fibre Channel volume. Fibre Channel volumes can only be
            mounted as read/write once. Fibre Channel volumes support ownership
            management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • lun (integer) Optional: FC target lun number
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
              
            • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
              combination of targetWWNs and lun must be set, but not both simultaneously.
              
          • flexVolume (Object) FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            

            • driver (string) Driver is the name of the driver to use for this volume.
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
              on FlexVolume script.
              
            • options (map[string]string) Optional: Extra command options if any.
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
              information to pass to the plugin scripts. This may be empty if no secret
              object is specified. If the secret object contains more than one secret,
              all secrets are passed to the plugin scripts.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
          • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
            This depends on the Flocker control service being running
            
            Represents a Flocker volume mounted by the Flocker agent. One and only one
            of datasetName and datasetUUID should be set. Flocker volumes do not
            support ownership management or SELinux relabeling.
            
            

            • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
              should be considered as deprecated
              
            • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
              
          • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
            Represents a Persistent Disk resource in Google Compute Engine.
            A GCE PD must exist before mounting to a container. The disk must also be
            in the same GCE project and zone as the kubelet. A GCE PD can only be
            mounted as read/write once or read-only many times. GCE PDs support
            ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty). More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
          • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
            GitRepo is deprecated. To provision a container with a git repo, mount an
            EmptyDir into an InitContainer that clones the repo using git, then mount
            the EmptyDir into the Pod's container.
            
            Represents a volume that is populated with the contents of a git
            repository. Git repo volumes do not support ownership management. Git repo
            volumes support SELinux relabeling.
            
            DEPRECATED: GitRepo is deprecated. To provision a container with a git
            repo, mount an EmptyDir into an InitContainer that clones the repo using
            git, then mount the EmptyDir into the Pod's container.
            
            

            • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
              supplied, the volume directory will be the git repository. Otherwise, if
              specified, the volume will contain the git repository in the subdirectory
              with the given name.
              
            • repository (string) Repository URL
              
            • revision (string) Commit hash for the specified revision.
              
          • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
            
            Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
              info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • path (string) Path is the Glusterfs volume path. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
              permissions. Defaults to false. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
          • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
            that is directly exposed to the container. This is generally used for
            system agents or other privileged things that are allowed to see the host
            machine. Most containers will NOT need this. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
            Represents a host path mapped into a pod. Host path volumes do not support
            ownership management or SELinux relabeling.
            
            

            • path (string) Path of the directory on the host. If the path is a symlink, it will follow
              the link to the real path. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
            • type (string) Type for HostPath Volume Defaults to "" More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
          • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
            host machine and then exposed to the pod. More info:
            https://examples.k8s.io/volumes/iscsi/README.md
            
            Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
            once. ISCSI volumes support ownership management and SELinux relabeling.
            
            

            • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
              
            • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
              
            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
              
            • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
              iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
              name) will be created for the connection.
              
            • iqn (string) Target iSCSI Qualified Name.
              
            • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
              (tcp).
              
            • lun (integer) iSCSI Target Lun number.
              
            • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
              port is other than default (typically TCP ports 860 and 3260).
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false.
              
            • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
              is other than default (typically TCP ports 860 and 3260).
              
          • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
            Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
            not support ownership management or SELinux relabeling.
            
            

            • path (string) Path that is exported by the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
              permissions. Defaults to false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • server (string) Server is the hostname or IP address of the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
          • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
            PersistentVolumeClaim in the same namespace. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
            PersistentVolumeClaimVolumeSource references the user's PVC in the same
            namespace. This volume finds the bound PV and mounts that volume for the
            pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
            another type of volume that is owned by someone else (the system).
            
            

            • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
              the pod using this volume. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
              
            • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
              
          • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
            and mounted on kubelets host machine
            
            Represents a Photon Controller persistent disk resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • pdID (string) ID that identifies Photon Controller persistent disk
              
          • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
            kubelets host machine
            
            PortworxVolumeSource represents a Portworx volume resource.
            
            

            • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
              supported by the host operating system. Ex. "ext4", "xfs". Implicitly
              inferred to be "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • volumeID (string) VolumeID uniquely identifies a Portworx volume
              
          • projected (Object) Items for all in one resources secrets, configmaps, and downward API
            
            Represents a projected volume source
            
            

            • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Directories within the path are not affected by this
              setting. This might be in conflict with other options that affect the file
              mode, like fsGroup, and the result can be other mode bits set.
              
            • sources ([]Object) list of volume projections
              
              Projection that may be projected along with other supported volume types
              
              

              • configMap (Object) information about the configMap data to project
                
                Adapts a ConfigMap into a projected volume.
                The contents of the target ConfigMap's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names, unless the items element is populated with specific mappings of keys
                to paths. Note that this is identical to a configmap volume source without
                the default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • downwardAPI (Object) information about the downwardAPI data to project
                
                Represents downward API info for projecting into a projected volume. Note
                that this is identical to a downwardAPI volume source without the default
                mode.
                
                

                • items ([]Object) Items is a list of DownwardAPIVolume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • secret (Object) information about the secret data to project
                
                Adapts a secret into a projected volume.
                The contents of the target Secret's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names. Note that this is identical to a secret volume source without the
                default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
              • serviceAccountToken (Object) information about the serviceAccountToken data to project
                
                ServiceAccountTokenProjection represents a projected service account token
                volume. This projection can be used to insert a service account token into
                the pods runtime filesystem for use against APIs (Kubernetes API Server or
                otherwise).
                
                

                • audience (string) Audience is the intended audience of the token. A recipient of a token must
                  identify itself with an identifier specified in the audience of the token,
                  and otherwise should reject the token. The audience defaults to the
                  identifier of the apiserver.
                  
                • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                  account token. As the token approaches expiration, the kubelet volume
                  plugin will proactively rotate the service account token. The kubelet will
                  start trying to rotate the token if the token is older than 80 percent of
                  its time to live or if the token is older than 24 hours.Defaults to 1 hour
                  and must be at least 10 minutes.
                  
                • path (string) Path is the path relative to the mount point of the file to project the
                  token into.
                  
          • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
            
            Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
            volumes do not support ownership management or SELinux relabeling.
            
            

            • group (string) Group to map volume access to Default is no group
              
            • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
              permissions. Defaults to false.
              
            • registry (string) Registry represents a single or multiple Quobyte Registry services
              specified as a string as host:port pair (multiple entries are separated
              with commas) which acts as the central registry for volumes
              
            • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
              provisioned Quobyte volumes, value is set by the plugin
              
            • user (string) User to map volume access to Defaults to serivceaccount user
              
            • volume (string) Volume is a string that references an already created Quobyte volume by
              name.
              
          • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
            
            Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
            volumes support ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
              
            • image (string) The rados image name. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
              More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • monitors ([]string) A collection of Ceph monitors. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • pool (string) The rados pool name. Default is rbd. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
              overrides keyring. Default is nil. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) The rados user name. Default is admin. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
          • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
            Kubernetes nodes.
            
            ScaleIOVolumeSource represents a persistent ScaleIO volume
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
              
            • gateway (string) The host address of the ScaleIO API Gateway.
              
            • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
              information. If this is not provided, Login operation will fail.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
              
            • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
              ThinProvisioned. Default is ThinProvisioned.
              
            • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
              
            • system (string) The name of the storage system as configured in ScaleIO.
              
            • volumeName (string) The name of a volume already created in the ScaleIO system that is
              associated with this volume source.
              
          • secret (Object) Secret represents a secret that should populate this volume. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
            Adapts a Secret into a volume.
            The contents of the target Secret's Data field will be presented in a
            volume as files using the keys in the Data field as the file names. Secret
            volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • optional (boolean) Specify whether the Secret or its keys must be defined
              
            • secretName (string) Name of the secret in the pod's namespace to use. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#secret
              
          • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
            nodes.
            
            Represents a StorageOS persistent volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
              credentials. If not specified, default values will be attempted.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
              are only unique within a namespace.
              
            • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
              namespace is specified then the Pod's namespace will be used. This allows
              the Kubernetes name scoping to be mirrored within StorageOS for tighter
              integration. Set VolumeName to any name to override the default behaviour.
              Set to "default" if you are not using namespaces within StorageOS.
              Namespaces that do not pre-exist within StorageOS will be created.
              
          • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
            host machine
            
            Represents a vSphere volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
              StoragePolicyName.
              
            • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
              
            • volumePath (string) Path that identifies vSphere volume vmdk
              
  • status (Object) Status is the most recently observed status of the ReplicaSet. This data
    may be out of date by some window of time. Populated by the system.
    Read-only. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    ReplicaSetStatus represents the current status of a ReplicaSet.
    
    

    • availableReplicas (integer) The number of available replicas (ready for at least minReadySeconds) for
      this replica set.
      
    • conditions ([]Object) Represents the latest available observations of a replica set's current
      state.
      
      ReplicaSetCondition describes the state of a replica set at a certain
      point.
      
      

      • lastTransitionTime (string) The last time the condition transitioned from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) A human readable message indicating details about the transition.
        
      • reason (string) The reason for the condition's last transition.
        
      • status (string) Status of the condition, one of True, False, Unknown.
        
      • type (string) Type of replica set condition.
        
    • fullyLabeledReplicas (integer) The number of pods that have labels matching the labels of the pod template
      of the replicaset.
      
    • observedGeneration (integer) ObservedGeneration reflects the generation of the most recently observed
      ReplicaSet.
      
    • readyReplicas (integer) readyReplicas is the number of pods targeted by this ReplicaSet with a
      Ready Condition.
      
    • replicas (integer) Replicas is the most recently oberved number of replicas. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller/#what-is-a-replicationcontroller
      
• DaemonSet DaemonSet represents the configuration of a daemon set.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) The desired behavior of this daemon set. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    DaemonSetSpec is the specification of a daemon set.
    
    

    • minReadySeconds (integer) The minimum number of seconds for which a newly created DaemonSet pod
      should be ready without any of its container crashing, for it to be
      considered available. Defaults to 0 (pod will be considered available as
      soon as it is ready).
      
    • revisionHistoryLimit (integer) The number of old history to retain to allow rollback. This is a pointer to
      distinguish between explicit zero and not specified. Defaults to 10.
      
    • selector (Object) A label query over pods that are managed by the daemon set. Must match in
      order to be controlled. It must match the pod template's labels. More info:
      https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
      
      A label selector is a label query over a set of resources. The result of
      matchLabels and matchExpressions are ANDed. An empty label selector matches
      all objects. A null label selector matches no objects.
      
      

      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
        are ANDed.
        
        A label selector requirement is a selector that contains values, a key, and
        an operator that relates the key and values.
        
        

        • key (string) key is the label key that the selector applies to.
          
        • operator (string) operator represents a key's relationship to a set of values. Valid
          operators are In, NotIn, Exists and DoesNotExist.
          
        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
          values array must be non-empty. If the operator is Exists or DoesNotExist,
          the values array must be empty. This array is replaced during a strategic
          merge patch.
          
      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
        matchLabels map is equivalent to an element of matchExpressions, whose key
        field is "key", the operator is "In", and the values array contains only
        "value". The requirements are ANDed.
        
    • template (Object) An object that describes the pod that will be created. The DaemonSet will
      create exactly one copy of this pod on every node that matches the
      template's node selector (or on every node if no node selector is
      specified). More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
      
      PodTemplateSpec describes the data a pod should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the pod. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        PodSpec is a description of a pod.
        
        

        • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
          StartTime before the system will actively try to mark it failed and kill
          associated containers. Value must be a positive integer.
          
        • affinity (Object) If specified, the pod's scheduling constraints
          
          Affinity is a group of affinity scheduling rules.
          
          

          • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
            
            Node affinity is a group of node affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node matches
              the corresponding matchExpressions; the node(s) with the highest sum are
              the most preferred.
              
              An empty preferred scheduling term matches all objects with implicit weight
              0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
              (i.e. is also a no-op).
              
              

              • preference (Object) A node selector term, associated with the corresponding weight.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
              • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to an update), the system may or may not try
              to eventually evict the pod from its node.
              
              A node selector represents the union of the results of one or more label
              queries over a set of nodes; that is, it represents the OR of the selectors
              represented by the node selector terms.
              
              

              • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
          • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
            same node, zone, etc. as some other pod(s)).
            
            Pod affinity is a group of inter pod affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node has pods
              which matches the corresponding podAffinityTerm; the node(s) with the
              highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to a pod label update), the system may or
              may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
          • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
            in the same node, zone, etc. as some other pod(s)).
            
            Pod anti affinity is a group of inter pod anti affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              anti-affinity expressions specified by this field, but it may choose a node
              that violates one or more of the expressions. The node that is most
              preferred is the one with the greatest sum of weights, i.e. for each node
              that meets all of the scheduling requirements (resource request,
              requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
              iterating through the elements of this field and adding "weight" to the sum
              if the node has pods which matches the corresponding podAffinityTerm; the
              node(s) with the highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              anti-affinity requirements specified by this field cease to be met at some
              point during pod execution (e.g. due to a pod label update), the system may
              or may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
        • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
          should be automatically mounted.
          
        • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
          added or removed. There must be at least one container in a Pod. Cannot be
          updated.
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
          merged to the generated DNS configuration based on DNSPolicy.
          
          PodDNSConfig defines the DNS parameters of a pod in addition to those
          generated from DNSPolicy.
          
          

          • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
            nameservers generated from DNSPolicy. Duplicated nameservers will be
            removed.
            
          • options ([]Object) A list of DNS resolver options. This will be merged with the base options
            generated from DNSPolicy. Duplicated entries will be removed. Resolution
            options given in Options will override those that appear in the base
            DNSPolicy.
            
            PodDNSConfigOption defines DNS resolver options of a pod.
            
            

            • name (string) Required.
              
            • value (string) (empty)
              
          • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
            the base search paths generated from DNSPolicy. Duplicated search paths
            will be removed.
            
        • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
          'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
          parameters given in DNSConfig will be merged with the policy selected with
          DNSPolicy. To have DNS options set along with hostNetwork, you have to
          specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
          
          
          
        • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
          injected into pod's environment variables, matching the syntax of Docker
          links. Optional: Defaults to true.
          
        • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
          run in an existing pod to perform user-initiated actions such as debugging.
          This list cannot be specified when creating a pod, and it cannot be
          modified by updating the pod spec. In order to add an ephemeral container
          to an existing pod, use the pod's ephemeralcontainers subresource. This
          field is beta-level and available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          An EphemeralContainer is a temporary container that you may add to an
          existing Pod for user-initiated activities such as debugging. Ephemeral
          containers have no resource or scheduling guarantees, and they will not be
          restarted when they exit or when a Pod is removed or restarted. The kubelet
          may evict a Pod if an ephemeral container causes the Pod to exceed its
          resource allocation.
          
          To add an ephemeral container, use the ephemeralcontainers subresource of
          an existing Pod. Ephemeral containers may not be removed or restarted.
          
          This is a beta feature available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
            unique among all containers, init containers and ephemeral containers.
            
          • ports ([]Object) Ports are not allowed for ephemeral containers.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
            use spare resources already allocated to the pod.
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
            container should be run with. If set, the fields of SecurityContext
            override the equivalent fields of PodSecurityContext.
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
            container targets. The ephemeral container will be run in the namespaces
            (IPC, PID, etc) of this container. If not set then the ephemeral container
            uses the namespaces configured in the Pod spec.
            
            The container runtime must implement support for this feature. If the
            runtime does not support namespace targeting then the result of setting
            this field is undefined.
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
            not allowed for ephemeral containers. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
          the pod's hosts file if specified. This is only valid for non-hostNetwork
          pods.
          
          HostAlias holds the mapping between IP and hostnames that will be injected
          as an entry in the pod's hosts file.
          
          

          • hostnames ([]string) Hostnames for the above IP address.
            
          • ip (string) IP address of the host file entry.
            
        • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
          
        • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
          If this option is set, the ports that will be used must be specified.
          Default to false.
          
        • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
          
        • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
          be set to a system-defined value.
          
        • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
          namespace to use for pulling any of the images used by this PodSpec. If
          specified, these secrets will be passed to individual puller
          implementations for them to use. For example, in the case of docker, only
          DockerConfig type secrets are honored. More info:
          https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
          executed in order prior to containers being started. If any init container
          fails, the pod is considered to have failed and is handled according to its
          restartPolicy. The name for an init container or normal container must be
          unique among all containers. Init containers may not have Lifecycle
          actions, Readiness probes, Liveness probes, or Startup probes. The
          resourceRequirements of an init container are taken into account during
          scheduling by finding the highest request/limit for each resource type, and
          then using the max of of that value or the sum of the normal containers.
          Limits are applied to init containers in a similar fashion. Init containers
          cannot currently be added or removed. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
          non-empty, the scheduler simply schedules this pod onto that node, assuming
          that it fits resource requirements.
          
        • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
          Selector which must match a node's labels for the pod to be scheduled on
          that node. More info:
          https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
          
        • os (Object) Specifies the OS of the containers in the pod. Some pod and container
          fields are restricted if this is set.
          
          If the OS field is set to linux, the following fields must be unset:
          -securityContext.windowsOptions
          
          If the OS field is set to windows, following fields must be unset: -
          spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
          spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
          spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
          spec.shareProcessNamespace - spec.securityContext.runAsUser -
          spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
          spec.containers[*].securityContext.seLinuxOptions -
          spec.containers[*].securityContext.seccompProfile -
          spec.containers[*].securityContext.capabilities -
          spec.containers[*].securityContext.readOnlyRootFilesystem -
          spec.containers[*].securityContext.privileged -
          spec.containers[*].securityContext.allowPrivilegeEscalation -
          spec.containers[*].securityContext.procMount -
          spec.containers[*].securityContext.runAsUser -
          spec.containers[*].securityContext.runAsGroup This is an alpha field and
          requires the IdentifyPodOS feature
          
          PodOS defines the OS parameters of a pod.
          
          

          • name (string) Name is the name of the operating system. The currently supported values
            are linux and windows. Additional value may be defined in future and can be
            one of:
            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
            Clients should expect to handle additional values and treat unrecognized
            values in this field as os: null
            
        • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
          a given RuntimeClass. This field will be autopopulated at admission time by
          the RuntimeClass admission controller. If the RuntimeClass admission
          controller is enabled, overhead must not be set in Pod create requests. The
          RuntimeClass admission controller will reject Pod create requests which
          have the overhead already set. If RuntimeClass is configured and selected
          in the PodSpec, Overhead will be set to the value defined in the
          corresponding RuntimeClass, otherwise it will remain unset and treated as
          zero. More info:
          https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
          This field is beta-level as of Kubernetes v1.18, and is only honored by
          servers that enable the PodOverhead feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
          of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
          This field is beta-level, gated by the NonPreemptingPriority feature-gate.
          
        • priority (integer) The priority value. Various system components use this field to find the
          priority of the pod. When Priority Admission Controller is enabled, it
          prevents users from setting this field. The admission controller populates
          this field from PriorityClassName. The higher the value, the higher the
          priority.
          
        • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
          "system-cluster-critical" are two special keywords which indicate the
          highest priorities with the former being the highest priority. Any other
          name must be defined by creating a PriorityClass object with that name. If
          not specified, the pod priority will be default or zero if there is no
          default.
          
        • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
          pod is ready when all its containers are ready AND all conditions specified
          in the readiness gates have status equal to "True" More info:
          https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
          
          PodReadinessGate contains the reference to a pod condition
          
          

          • conditionType (string) ConditionType refers to a condition in the pod's condition list with
            matching type.
            
            
            
        • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
          Never. Default to Always. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
          
          
          
        • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
          which should be used to run this pod. If no RuntimeClass resource matches
          the named class, the pod will not be run. If unset or empty, the "legacy"
          RuntimeClass will be used, which is an implicit class with an empty
          definition that uses the default runtime handler. More info:
          https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
          beta feature as of Kubernetes v1.14.
          
        • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
          specified, the pod will be dispatched by default scheduler.
          
        • securityContext (Object) SecurityContext holds pod-level security attributes and common container
          settings. Optional: Defaults to empty. See type description for default
          values of each field.
          
          PodSecurityContext holds pod-level security attributes and common container
          settings. Some fields are also present in container.securityContext. Field
          values of container.securityContext take precedence over field values of
          PodSecurityContext.
          
          

          • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
            volume types allow the Kubelet to change the ownership of that volume to be
            owned by the pod:
            
            1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
            created in the volume will be owned by FSGroup) 3. The permission bits are
            OR'd with rw-rw----
            
            If unset, the Kubelet will not modify the ownership and permissions of any
            volume. Note that this field cannot be set when spec.os.name is windows.
            
          • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
            of the volume before being exposed inside Pod. This field will only apply
            to volume types which support fsGroup based ownership(and permissions). It
            will have no effect on ephemeral volume types such as: secret, configmaps
            and emptydir. Valid values are "OnRootMismatch" and "Always". If not
            specified, "Always" is used. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence for that container.
            Note that this field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
            field cannot be set when spec.os.name is windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
            addition to the container's primary GID. If unspecified, no groups will be
            added to any container. Note that this field cannot be set when
            spec.os.name is windows.
            
          • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
            unsupported sysctls (by the container runtime) might fail to launch. Note
            that this field cannot be set when spec.os.name is windows.
            
            Sysctl defines a kernel parameter to be set
            
            

            • name (string) Name of a property to set
              
            • value (string) Value of a property to set
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options within a container's SecurityContext will be used. If set in
            both SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
          Deprecated: Use serviceAccountName instead.
          
        • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
          pod. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
          
        • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
          than the leaf name (the default). In Linux containers, this means setting
          the FQDN in the hostname field of the kernel (the nodename field of struct
          utsname). In Windows containers, this means setting the registry value of
          hostname for the registry key
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
          FQDN. If a pod does not have FQDN, this has no effect. Default to false.
          
        • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
          When this is set containers will be able to view and signal processes from
          other containers in the same pod, and the first process in each container
          will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
          be set. Optional: Default to false.
          
        • subdomain (string) If specified, the fully qualified Pod hostname will be
          "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
          specified, the pod will not have a domainname at all.
          
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
          decreased in delete request. Value must be non-negative integer. The value
          zero indicates stop immediately via the kill signal (no opportunity to shut
          down). If this value is nil, the default grace period will be used instead.
          The grace period is the duration in seconds after the processes running in
          the pod are sent a termination signal and the time when the processes are
          forcibly halted with a kill signal. Set this value longer than the expected
          cleanup time for your process. Defaults to 30 seconds.
          
        • tolerations ([]Object) If specified, the pod's tolerations.
          
          The pod this Toleration is attached to tolerates any taint that matches the
          triple (key,value,effect) using the matching operator (operator).
          
          

          • effect (string) Effect indicates the taint effect to match. Empty means match all taint
            effects. When specified, allowed values are NoSchedule, PreferNoSchedule
            and NoExecute.
            
            
            
          • key (string) Key is the taint key that the toleration applies to. Empty means match all
            taint keys. If the key is empty, operator must be Exists; this combination
            means to match all values and all keys.
            
          • operator (string) Operator represents a key's relationship to the value. Valid operators are
            Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
            value, so that a pod can tolerate all taints of a particular category.
            
            
            
          • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
            be of effect NoExecute, otherwise this field is ignored) tolerates the
            taint. By default, it is not set, which means tolerate the taint forever
            (do not evict). Zero and negative values will be treated as 0 (evict
            immediately) by the system.
            
          • value (string) Value is the taint value the toleration matches to. If the operator is
            Exists, the value should be empty, otherwise just a regular string.
            
        • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
          across topology domains. Scheduler will schedule pods in a way which abides
          by the constraints. All topologySpreadConstraints are ANDed.
          
          TopologySpreadConstraint specifies how to spread matching pods among the
          given topology.
          
          

          • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
            selector are counted to determine the number of pods in their corresponding
            topology domain.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
            When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
            difference between the number of matching pods in the target topology and
            the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
            and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
            zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
            to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
            ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
            incoming pod can be scheduled onto any zone. When
            `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
            topologies that satisfy it. It's a required field. Default value is 1 and 0
            is not allowed.
            
          • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
            key and identical values are considered to be in the same topology. We
            consider each (key, value) as a "bucket", and try to put balanced number of
            pods into each bucket. It's a required field.
            
          • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
            the spread constraint. - DoNotSchedule (default) tells the scheduler not to
            schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
            any location, but giving higher precedence to topologies that would help
            reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
            pod if and only if every possible node assignment for that pod would
            violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
            MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
            | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
            DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
            3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
            other words, the cluster can still be imbalanced, but scheduler won't make
            it *more* imbalanced. It's a required field.
            
            
            
        • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
          More info: https://kubernetes.io/docs/concepts/storage/volumes
          
          Volume represents a named volume in a pod that may be accessed by any
          container in the pod.
          
          

          • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
            Represents a Persistent Disk resource in AWS.
            An AWS EBS disk must exist before mounting to a container. The disk must
            also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
            mounted as read/write once. AWS EBS volumes support ownership management
            and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty).
              
            • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
              "true". If omitted, the default is "false". More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
              info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
          • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            

            • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
              
            • diskName (string) The Name of the data disk in the blob storage
              
            • diskURI (string) The URI the data disk in the blob storage
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
              single blob disk per storage account Managed: azure managed data disk (only
              in managed availability set). defaults to shared
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
          • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            

            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretName (string) the name of secret that contains Azure Storage Account Name and Key
              
            • shareName (string) Share Name
              
          • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
            
            Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
              is /
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
              /etc/ceph/user.secret More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
              default is empty. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) Optional: User is the rados user name, default is admin More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
          • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
            machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
            
            Represents a cinder volume resource in Openstack. A Cinder volume must
            exist before mounting to a container. The volume must also be in the same
            region as the kubelet. Cinder volumes support ownership management and
            SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
              be "ext4" if unspecified. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • secretRef (Object) Optional: points to a secret object containing parameters used to connect
              to OpenStack.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeID (string) volume id used to identify the volume in cinder. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
          • configMap (Object) ConfigMap represents a configMap that should populate this volume
            
            Adapts a ConfigMap into a volume.
            The contents of the target ConfigMap's Data field will be presented in a
            volume as files using the keys in the Data field as the file names, unless
            the items element is populated with specific mappings of keys to paths.
            ConfigMap volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
            handled by certain external CSI drivers (Beta feature).
            
            Represents a source location of a volume to mount, managed by an external
            CSI driver
            
            

            • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
              your admin for the correct name as registered in the cluster.
              
            • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
              empty value is passed to the associated CSI driver which will determine the
              default filesystem to apply.
              
            • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
              sensitive information to pass to the CSI driver to complete the CSI
              NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
              and may be empty if no secret is required. If the secret object contains
              more than one secret, all secret references are passed.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
              (read/write).
              
            • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
              CSI driver. Consult your driver's documentation for supported values.
              
          • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
            volume
            
            DownwardAPIVolumeSource represents a volume containing downward API info.
            Downward API volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
              mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) Items is a list of downward API volume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
            Represents an empty directory for a pod. Empty directory volumes support
            ownership management and SELinux relabeling.
            
            

            • medium (string) What type of storage medium should back this directory. The default is ""
              which means to use the node's default medium. Must be an empty string
              (default) or Memory. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              
            • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
              limit is also applicable for memory medium. The maximum usage on memory
              medium EmptyDir would be the minimum value between the SizeLimit specified
              here and the sum of memory limits of all containers in a pod. The default
              is nil which means that the limit is undefined. More info:
              http://kubernetes.io/docs/user-guide/volumes#emptydir
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
            The volume's lifecycle is tied to the pod that defines it - it will be
            created before the pod starts, and deleted when the pod is removed.
            
            Use this if: a) the volume is only needed while the pod runs, b) features
            of normal volumes like restoring from snapshot or capacity tracking are
            needed, c) the storage driver is specified through a storage class, and d)
            the storage driver supports dynamic volume provisioning through a
            PersistentVolumeClaim (see EphemeralVolumeSource for more information on
            the connection between this volume type and PersistentVolumeClaim).
            
            Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
            that persist for longer than the lifecycle of an individual pod.
            
            Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
            to be used that way - see the documentation of the driver for more
            information.
            
            A pod can use both types of ephemeral volumes and persistent volumes at the
            same time.
            
            Represents an ephemeral volume that is handled by a normal storage driver.
            
            

            • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
              in which this EphemeralVolumeSource is embedded will be the owner of the
              PVC, i.e. the PVC will be deleted together with the pod. The name of the
              PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
              from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
              if the concatenated name is not valid for a PVC (for example, too long).
              
              An existing PVC with that name that is not owned by the pod will *not* be
              used for the pod to avoid using an unrelated volume by mistake. Starting
              the pod is then blocked until the unrelated PVC is removed. If such a
              pre-created PVC is meant to be used by the pod, the PVC has to updated with
              an owner reference to the pod once the pod exists. Normally this should not
              be necessary, but it may be useful when manually reconstructing a broken
              cluster.
              
              This field is read-only and no changes will be made by Kubernetes to the
              PVC after it has been created.
              
              Required, must not be nil.
              
              PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
              objects as part of an EphemeralVolumeSource.
              
              

              • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                creating it. No other fields are allowed and will be rejected during
                validation.
                
                ObjectMeta is metadata that all persisted resources must have, which
                includes all objects users must create.
                
                

                • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                  may be set by external tools to store and retrieve arbitrary metadata. They
                  are not queryable and should be preserved when modifying objects. More
                  info: http://kubernetes.io/docs/user-guide/annotations
                  
                • clusterName (string) The name of the cluster which the object belongs to. This is used to
                  distinguish resources with same name and namespace in different clusters.
                  This field is not set anywhere right now and apiserver is going to ignore
                  it if set in create or update request.
                  
                • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                  object was created. It is not guaranteed to be set in happens-before order
                  across separate operations. Clients may not set this value. It is
                  represented in RFC3339 form and is in UTC.
                  
                  Populated by the system. Read-only. Null for lists. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                  will be removed from the system. Only set when deletionTimestamp is also
                  set. May only be shortened. Read-only.
                  
                • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                  deleted. This field is set by the server when a graceful deletion is
                  requested by the user, and is not directly settable by a client. The
                  resource is expected to be deleted (no longer visible from resource lists,
                  and not reachable by name) after the time in this field, once the
                  finalizers list is empty. As long as the finalizers list contains items,
                  deletion is blocked. Once the deletionTimestamp is set, this value may not
                  be unset or be set further into the future, although it may be shortened or
                  the resource may be deleted prior to this time. For example, a user may
                  request that a pod is deleted in 30 seconds. The Kubelet will react by
                  sending a graceful termination signal to the containers in the pod. After
                  that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                  to the container and after cleanup, remove the pod from the API. In the
                  presence of network partitions, this object may still exist after this
                  timestamp, until an administrator or automated process can determine the
                  resource is fully terminated. If not set, graceful deletion of the object
                  has not been requested.
                  
                  Populated by the system when a graceful deletion is requested. Read-only.
                  More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                  an identifier for the responsible component that will remove the entry from
                  the list. If the deletionTimestamp of the object is non-nil, entries in
                  this list can only be removed. Finalizers may be processed and removed in
                  any order. Order is NOT enforced because it introduces significant risk of
                  stuck finalizers. finalizers is a shared field, any actor with permission
                  can reorder it. If the finalizer list is processed in order, then this can
                  lead to a situation in which the component responsible for the first
                  finalizer in the list is waiting for a signal (field value, external
                  system, or other) produced by a component responsible for a finalizer later
                  in the list, resulting in a deadlock. Without enforced ordering finalizers
                  are free to order amongst themselves and are not vulnerable to ordering
                  changes in the list.
                  
                • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                  unique name ONLY IF the Name field has not been provided. If this field is
                  used, the name returned to the client will be different than the name
                  passed. This value will also be combined with a unique suffix. The provided
                  value has the same validation rules as the Name field, and may be truncated
                  by the length of the suffix required to make the value unique on the
                  server.
                  
                  If this field is specified and the generated name exists, the server will
                  NOT return a 409 - instead, it will either return 201 Created or 500 with
                  Reason ServerTimeout indicating a unique name could not be found in the
                  time allotted, and the client should retry (optionally after the time
                  indicated in the Retry-After header).
                  
                  Applied only if Name is not specified. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                  
                • generation (integer) A sequence number representing a specific generation of the desired state.
                  Populated by the system. Read-only.
                  
                • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                  (scope and select) objects. May match selectors of replication controllers
                  and services. More info: http://kubernetes.io/docs/user-guide/labels
                  
                • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                  managed by that workflow. This is mostly for internal housekeeping, and
                  users typically shouldn't need to set or understand this field. A workflow
                  can be the user's name, a controller's name, or the name of a specific
                  apply path like "ci-cd". The set of fields is always in the version that
                  the workflow used when modifying the object.
                  
                  ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                  the resource that the fieldset applies to.
                  
                  

                  • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                    to. The format is "group/version" just like the top-level APIVersion field.
                    It is necessary to track the version of a field set because it cannot be
                    automatically converted.
                    
                  • fieldsType (string) FieldsType is the discriminator for the different fields format and
                    version. There is currently only one possible value: "FieldsV1"
                    
                  • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                    type.
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                  • manager (string) Manager is an identifier of the workflow managing these fields.
                    
                  • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                    being created. The only valid values for this field are 'Apply' and
                    'Update'.
                    
                  • subresource (string) Subresource is the name of the subresource used to update that object, or
                    empty string if the object was updated through the main resource. The value
                    of this field is used to distinguish between managers, even if they share
                    the same name. For example, a status update will be distinct from a regular
                    update using the same manager name. Note that the APIVersion field is not
                    related to the Subresource field and it always corresponds to the version
                    of the main resource.
                    
                  • time (string) Time is timestamp of when these fields were set. It should always be empty
                    if Operation is 'Apply'
                    
                    Time is a wrapper around time.Time which supports correct marshaling to
                    YAML and JSON. Wrappers are provided for many of the factory methods that
                    the time package offers.
                    
                • name (string) Name must be unique within a namespace. Is required when creating
                  resources, although some resources may allow a client to request the
                  generation of an appropriate name automatically. Name is primarily intended
                  for creation idempotence and configuration definition. Cannot be updated.
                  More info: http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • namespace (string) Namespace defines the space within which each name must be unique. An empty
                  namespace is equivalent to the "default" namespace, but "default" is the
                  canonical representation. Not all objects are required to be scoped to a
                  namespace - the value of this field for those objects will be empty.
                  
                  Must be a DNS_LABEL. Cannot be updated. More info:
                  http://kubernetes.io/docs/user-guide/namespaces
                  
                • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                  been deleted, this object will be garbage collected. If this object is
                  managed by a controller, then an entry in this list will point to this
                  controller, with the controller field set to true. There cannot be more
                  than one managing controller.
                  
                  OwnerReference contains enough information to let you identify an owning
                  object. An owning object must be in the same namespace as the dependent, or
                  be cluster-scoped, so there is no namespace field.
                  
                  

                  • apiVersion (string) API version of the referent.
                    
                  • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                    owner cannot be deleted from the key-value store until this reference is
                    removed. Defaults to false. To set this field, a user needs "delete"
                    permission of the owner, otherwise 422 (Unprocessable Entity) will be
                    returned.
                    
                  • controller (boolean) If true, this reference points to the managing controller.
                    
                  • kind (string) Kind of the referent. More info:
                    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    
                  • name (string) Name of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#names
                    
                  • uid (string) UID of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#uids
                    
                • resourceVersion (string) An opaque value that represents the internal version of this object that
                  can be used by clients to determine when objects have changed. May be used
                  for optimistic concurrency, change detection, and the watch operation on a
                  resource or set of resources. Clients must treat these values as opaque and
                  passed unmodified back to the server. They may only be valid for a
                  particular resource or set of resources.
                  
                  Populated by the system. Read-only. Value must be treated as opaque by
                  clients and . More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                  
                • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                  Read-only.
                  
                  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                  the field is planned to be removed in 1.21 release.
                  
                • uid (string) UID is the unique in time and space value for this object. It is typically
                  generated by the server on successful creation of a resource and is not
                  allowed to change on PUT operations.
                  
                  Populated by the system. Read-only. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                copied unchanged into the PVC that gets created from this template. The
                same fields as in a PersistentVolumeClaim are also valid here.
                
                PersistentVolumeClaimSpec describes the common attributes of storage
                devices and allows a Source for provider-specific attributes
                
                

                • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                  info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                  
                • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                  object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                  (PersistentVolumeClaim) If the provisioner or an external controller can
                  support the specified data source, it will create a new volume based on the
                  contents of the specified data source. If the AnyVolumeDataSource feature
                  gate is enabled, this field will always have the same contents as the
                  DataSourceRef field.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                  non-empty volume is desired. This may be any local object from a non-empty
                  API group (non core object) or a PersistentVolumeClaim object. When this
                  field is specified, volume binding will only succeed if the type of the
                  specified object matches some installed volume populator or dynamic
                  provisioner. This field will replace the functionality of the DataSource
                  field and as such if both fields are non-empty, they must have the same
                  value. For backwards compatibility, both fields (DataSource and
                  DataSourceRef) will be set to the same value automatically if one of them
                  is empty and the other is non-empty. There are two important differences
                  between DataSource and DataSourceRef: * While DataSource only allows two
                  specific types of objects, DataSourceRef allows any non-core object, as
                  well as PersistentVolumeClaim objects.
                  * While DataSource ignores disallowed values (dropping them), DataSourceRef
                  preserves all values, and generates an error if a disallowed value is
                  specified. (Alpha) Using this field requires the AnyVolumeDataSource
                  feature gate to be enabled.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • resources (Object) Resources represents the minimum resources the volume should have. If
                  RecoverVolumeExpansionFailure feature is enabled users are allowed to
                  specify resource requirements that are lower than previous value but must
                  still be higher than capacity recorded in the status field of the claim.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                  
                  ResourceRequirements describes the compute resource requirements.
                  
                  

                  • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                    Requests is omitted for a container, it defaults to Limits if that is
                    explicitly specified, otherwise to an implementation-defined value. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                • selector (Object) A label query over volumes to consider for binding.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • storageClassName (string) Name of the StorageClass required by the claim. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                  
                • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                  Filesystem is implied when not included in claim spec.
                  
                • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                  claim.
                  
          • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
            machine and then exposed to the pod.
            
            Represents a Fibre Channel volume. Fibre Channel volumes can only be
            mounted as read/write once. Fibre Channel volumes support ownership
            management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • lun (integer) Optional: FC target lun number
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
              
            • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
              combination of targetWWNs and lun must be set, but not both simultaneously.
              
          • flexVolume (Object) FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            

            • driver (string) Driver is the name of the driver to use for this volume.
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
              on FlexVolume script.
              
            • options (map[string]string) Optional: Extra command options if any.
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
              information to pass to the plugin scripts. This may be empty if no secret
              object is specified. If the secret object contains more than one secret,
              all secrets are passed to the plugin scripts.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
          • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
            This depends on the Flocker control service being running
            
            Represents a Flocker volume mounted by the Flocker agent. One and only one
            of datasetName and datasetUUID should be set. Flocker volumes do not
            support ownership management or SELinux relabeling.
            
            

            • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
              should be considered as deprecated
              
            • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
              
          • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
            Represents a Persistent Disk resource in Google Compute Engine.
            A GCE PD must exist before mounting to a container. The disk must also be
            in the same GCE project and zone as the kubelet. A GCE PD can only be
            mounted as read/write once or read-only many times. GCE PDs support
            ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty). More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
          • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
            GitRepo is deprecated. To provision a container with a git repo, mount an
            EmptyDir into an InitContainer that clones the repo using git, then mount
            the EmptyDir into the Pod's container.
            
            Represents a volume that is populated with the contents of a git
            repository. Git repo volumes do not support ownership management. Git repo
            volumes support SELinux relabeling.
            
            DEPRECATED: GitRepo is deprecated. To provision a container with a git
            repo, mount an EmptyDir into an InitContainer that clones the repo using
            git, then mount the EmptyDir into the Pod's container.
            
            

            • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
              supplied, the volume directory will be the git repository. Otherwise, if
              specified, the volume will contain the git repository in the subdirectory
              with the given name.
              
            • repository (string) Repository URL
              
            • revision (string) Commit hash for the specified revision.
              
          • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
            
            Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
              info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • path (string) Path is the Glusterfs volume path. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
              permissions. Defaults to false. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
          • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
            that is directly exposed to the container. This is generally used for
            system agents or other privileged things that are allowed to see the host
            machine. Most containers will NOT need this. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
            Represents a host path mapped into a pod. Host path volumes do not support
            ownership management or SELinux relabeling.
            
            

            • path (string) Path of the directory on the host. If the path is a symlink, it will follow
              the link to the real path. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
            • type (string) Type for HostPath Volume Defaults to "" More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
          • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
            host machine and then exposed to the pod. More info:
            https://examples.k8s.io/volumes/iscsi/README.md
            
            Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
            once. ISCSI volumes support ownership management and SELinux relabeling.
            
            

            • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
              
            • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
              
            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
              
            • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
              iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
              name) will be created for the connection.
              
            • iqn (string) Target iSCSI Qualified Name.
              
            • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
              (tcp).
              
            • lun (integer) iSCSI Target Lun number.
              
            • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
              port is other than default (typically TCP ports 860 and 3260).
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false.
              
            • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
              is other than default (typically TCP ports 860 and 3260).
              
          • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
            Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
            not support ownership management or SELinux relabeling.
            
            

            • path (string) Path that is exported by the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
              permissions. Defaults to false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • server (string) Server is the hostname or IP address of the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
          • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
            PersistentVolumeClaim in the same namespace. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
            PersistentVolumeClaimVolumeSource references the user's PVC in the same
            namespace. This volume finds the bound PV and mounts that volume for the
            pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
            another type of volume that is owned by someone else (the system).
            
            

            • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
              the pod using this volume. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
              
            • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
              
          • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
            and mounted on kubelets host machine
            
            Represents a Photon Controller persistent disk resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • pdID (string) ID that identifies Photon Controller persistent disk
              
          • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
            kubelets host machine
            
            PortworxVolumeSource represents a Portworx volume resource.
            
            

            • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
              supported by the host operating system. Ex. "ext4", "xfs". Implicitly
              inferred to be "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • volumeID (string) VolumeID uniquely identifies a Portworx volume
              
          • projected (Object) Items for all in one resources secrets, configmaps, and downward API
            
            Represents a projected volume source
            
            

            • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Directories within the path are not affected by this
              setting. This might be in conflict with other options that affect the file
              mode, like fsGroup, and the result can be other mode bits set.
              
            • sources ([]Object) list of volume projections
              
              Projection that may be projected along with other supported volume types
              
              

              • configMap (Object) information about the configMap data to project
                
                Adapts a ConfigMap into a projected volume.
                The contents of the target ConfigMap's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names, unless the items element is populated with specific mappings of keys
                to paths. Note that this is identical to a configmap volume source without
                the default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • downwardAPI (Object) information about the downwardAPI data to project
                
                Represents downward API info for projecting into a projected volume. Note
                that this is identical to a downwardAPI volume source without the default
                mode.
                
                

                • items ([]Object) Items is a list of DownwardAPIVolume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • secret (Object) information about the secret data to project
                
                Adapts a secret into a projected volume.
                The contents of the target Secret's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names. Note that this is identical to a secret volume source without the
                default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
              • serviceAccountToken (Object) information about the serviceAccountToken data to project
                
                ServiceAccountTokenProjection represents a projected service account token
                volume. This projection can be used to insert a service account token into
                the pods runtime filesystem for use against APIs (Kubernetes API Server or
                otherwise).
                
                

                • audience (string) Audience is the intended audience of the token. A recipient of a token must
                  identify itself with an identifier specified in the audience of the token,
                  and otherwise should reject the token. The audience defaults to the
                  identifier of the apiserver.
                  
                • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                  account token. As the token approaches expiration, the kubelet volume
                  plugin will proactively rotate the service account token. The kubelet will
                  start trying to rotate the token if the token is older than 80 percent of
                  its time to live or if the token is older than 24 hours.Defaults to 1 hour
                  and must be at least 10 minutes.
                  
                • path (string) Path is the path relative to the mount point of the file to project the
                  token into.
                  
          • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
            
            Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
            volumes do not support ownership management or SELinux relabeling.
            
            

            • group (string) Group to map volume access to Default is no group
              
            • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
              permissions. Defaults to false.
              
            • registry (string) Registry represents a single or multiple Quobyte Registry services
              specified as a string as host:port pair (multiple entries are separated
              with commas) which acts as the central registry for volumes
              
            • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
              provisioned Quobyte volumes, value is set by the plugin
              
            • user (string) User to map volume access to Defaults to serivceaccount user
              
            • volume (string) Volume is a string that references an already created Quobyte volume by
              name.
              
          • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
            
            Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
            volumes support ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
              
            • image (string) The rados image name. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
              More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • monitors ([]string) A collection of Ceph monitors. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • pool (string) The rados pool name. Default is rbd. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
              overrides keyring. Default is nil. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) The rados user name. Default is admin. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
          • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
            Kubernetes nodes.
            
            ScaleIOVolumeSource represents a persistent ScaleIO volume
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
              
            • gateway (string) The host address of the ScaleIO API Gateway.
              
            • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
              information. If this is not provided, Login operation will fail.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
              
            • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
              ThinProvisioned. Default is ThinProvisioned.
              
            • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
              
            • system (string) The name of the storage system as configured in ScaleIO.
              
            • volumeName (string) The name of a volume already created in the ScaleIO system that is
              associated with this volume source.
              
          • secret (Object) Secret represents a secret that should populate this volume. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
            Adapts a Secret into a volume.
            The contents of the target Secret's Data field will be presented in a
            volume as files using the keys in the Data field as the file names. Secret
            volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • optional (boolean) Specify whether the Secret or its keys must be defined
              
            • secretName (string) Name of the secret in the pod's namespace to use. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#secret
              
          • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
            nodes.
            
            Represents a StorageOS persistent volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
              credentials. If not specified, default values will be attempted.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
              are only unique within a namespace.
              
            • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
              namespace is specified then the Pod's namespace will be used. This allows
              the Kubernetes name scoping to be mirrored within StorageOS for tighter
              integration. Set VolumeName to any name to override the default behaviour.
              Set to "default" if you are not using namespaces within StorageOS.
              Namespaces that do not pre-exist within StorageOS will be created.
              
          • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
            host machine
            
            Represents a vSphere volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
              StoragePolicyName.
              
            • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
              
            • volumePath (string) Path that identifies vSphere volume vmdk
              
    • updateStrategy (Object) An update strategy to replace existing DaemonSet pods with new pods.
      
      DaemonSetUpdateStrategy is a struct used to control the update strategy for
      a DaemonSet.
      
      

      • rollingUpdate (Object) Rolling update config params. Present only if type = "RollingUpdate".
        
        Spec to control the desired behavior of daemon set rolling update.
        
        

        • maxSurge (string) The maximum number of nodes with an existing available DaemonSet pod that
          can have an updated DaemonSet pod during during an update. Value can be an
          absolute number (ex: 5) or a percentage of desired pods (ex:
          10%!)(MISSING). This can not be 0 if MaxUnavailable is 0. Absolute number
          is calculated from percentage by rounding up to a minimum of 1. Default
          value is 0. Example: when this is set to 30%!,(MISSING) at most
          30%!o(MISSING)f the total number of nodes that should be running the daemon
          pod (i.e. status.desiredNumberScheduled) can have their a new pod created
          before the old pod is marked as deleted. The update starts by launching new
          pods on 30%!o(MISSING)f nodes. Once an updated pod is available (Ready for
          at least minReadySeconds) the old DaemonSet pod on that node is marked
          deleted. If the old pod becomes unavailable for any reason (Ready
          transitions to false, is evicted, or is drained) an updated pod is
          immediatedly created on that node without considering surge limits.
          Allowing surge implies the possibility that the resources consumed by the
          daemonset on any given node can double if the readiness check fails, and so
          resource intensive daemonsets should take into account that they may cause
          evictions during disruption. This is beta field and enabled/disabled by
          DaemonSetUpdateSurge feature gate.
          
          IntOrString is a type that can hold an int32 or a string. When used in JSON
          or YAML marshalling and unmarshalling, it produces or consumes the inner
          type. This allows you to have, for example, a JSON field that can accept a
          name or number.
          
        • maxUnavailable (string) The maximum number of DaemonSet pods that can be unavailable during the
          update. Value can be an absolute number (ex: 5) or a percentage of total
          number of DaemonSet pods at the start of the update (ex: 10%!)(MISSING).
          Absolute number is calculated from percentage by rounding up. This cannot
          be 0 if MaxSurge is 0 Default value is 1. Example: when this is set to
          30%!,(MISSING) at most 30%!o(MISSING)f the total number of nodes that
          should be running the daemon pod (i.e. status.desiredNumberScheduled) can
          have their pods stopped for an update at any given time. The update starts
          by stopping at most 30%!o(MISSING)f those DaemonSet pods and then brings up
          new DaemonSet pods in their place. Once the new pods are available, it then
          proceeds onto other DaemonSet pods, thus ensuring that at least
          70%!o(MISSING)f original number of DaemonSet pods are available at all
          times during the update.
          
          IntOrString is a type that can hold an int32 or a string. When used in JSON
          or YAML marshalling and unmarshalling, it produces or consumes the inner
          type. This allows you to have, for example, a JSON field that can accept a
          name or number.
          
      • type (string) Type of daemon set update. Can be "RollingUpdate" or "OnDelete". Default is
        RollingUpdate.
        
        
        
  • status (Object) The current status of this daemon set. This data may be out of date by some
    window of time. Populated by the system. Read-only. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    DaemonSetStatus represents the current status of a daemon set.
    
    

    • collisionCount (integer) Count of hash collisions for the DaemonSet. The DaemonSet controller uses
      this field as a collision avoidance mechanism when it needs to create the
      name for the newest ControllerRevision.
      
    • conditions ([]Object) Represents the latest available observations of a DaemonSet's current
      state.
      
      DaemonSetCondition describes the state of a DaemonSet at a certain point.
      
      

      • lastTransitionTime (string) Last time the condition transitioned from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) A human readable message indicating details about the transition.
        
      • reason (string) The reason for the condition's last transition.
        
      • status (string) Status of the condition, one of True, False, Unknown.
        
      • type (string) Type of DaemonSet condition.
        
    • currentNumberScheduled (integer) The number of nodes that are running at least 1 daemon pod and are supposed
      to run the daemon pod. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
      
    • desiredNumberScheduled (integer) The total number of nodes that should be running the daemon pod (including
      nodes correctly running the daemon pod). More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
      
    • numberAvailable (integer) The number of nodes that should be running the daemon pod and have one or
      more of the daemon pod running and available (ready for at least
      spec.minReadySeconds)
      
    • numberMisscheduled (integer) The number of nodes that are running the daemon pod, but are not supposed
      to run the daemon pod. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/
      
    • numberReady (integer) numberReady is the number of nodes that should be running the daemon pod
      and have one or more of the daemon pod running with a Ready Condition.
      
    • numberUnavailable (integer) The number of nodes that should be running the daemon pod and have none of
      the daemon pod running and available (ready for at least
      spec.minReadySeconds)
      
    • observedGeneration (integer) The most recent generation observed by the daemon set controller.
      
    • updatedNumberScheduled (integer) The total number of nodes that are running updated daemon pod
      
• StatefulSet StatefulSet represents a set of pods with consistent identities. Identities
  are defined as:
  - Network: A single stable DNS and hostname.
  - Storage: As many VolumeClaims as requested. The StatefulSet guarantees
  that a given network identity will always map to the same storage identity.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Spec defines the desired identities of pods in this set.
    
    A StatefulSetSpec is the specification of a StatefulSet.
    
    

    • minReadySeconds (integer) Minimum number of seconds for which a newly created pod should be ready
      without any of its container crashing for it to be considered available.
      Defaults to 0 (pod will be considered available as soon as it is ready)
      This is an alpha field and requires enabling StatefulSetMinReadySeconds
      feature gate.
      
    • persistentVolumeClaimRetentionPolicy (Object) persistentVolumeClaimRetentionPolicy describes the lifecycle of persistent
      volume claims created from volumeClaimTemplates. By default, all persistent
      volume claims are created as needed and retained until manually deleted.
      This policy allows the lifecycle to be altered, for example by deleting
      persistent volume claims when their stateful set is deleted, or when their
      pod is scaled down. This requires the StatefulSetAutoDeletePVC feature gate
      to be enabled, which is alpha. +optional
      
      StatefulSetPersistentVolumeClaimRetentionPolicy describes the policy used
      for PVCs created from the StatefulSet VolumeClaimTemplates.
      
      

      • whenDeleted (string) WhenDeleted specifies what happens to PVCs created from StatefulSet
        VolumeClaimTemplates when the StatefulSet is deleted. The default policy of
        `Retain` causes PVCs to not be affected by StatefulSet deletion. The
        `Delete` policy causes those PVCs to be deleted.
        
      • whenScaled (string) WhenScaled specifies what happens to PVCs created from StatefulSet
        VolumeClaimTemplates when the StatefulSet is scaled down. The default
        policy of `Retain` causes PVCs to not be affected by a scaledown. The
        `Delete` policy causes the associated PVCs for any excess pods above the
        replica count to be deleted.
        
    • podManagementPolicy (string) podManagementPolicy controls how pods are created during initial scale up,
      when replacing pods on nodes, or when scaling down. The default policy is
      `OrderedReady`, where pods are created in increasing order (pod-0, then
      pod-1, etc) and the controller will wait until each pod is ready before
      continuing. When scaling down, the pods are removed in the opposite order.
      The alternative policy is `Parallel` which will create pods in parallel to
      match the desired scale without waiting, and on scale down will delete all
      pods at once.
      
      
      
    • replicas (integer) replicas is the desired number of replicas of the given Template. These are
      replicas in the sense that they are instantiations of the same Template,
      but individual replicas also have a consistent identity. If unspecified,
      defaults to 1.
      
    • revisionHistoryLimit (integer) revisionHistoryLimit is the maximum number of revisions that will be
      maintained in the StatefulSet's revision history. The revision history
      consists of all revisions not represented by a currently applied
      StatefulSetSpec version. The default value is 10.
      
    • selector (Object) selector is a label query over pods that should match the replica count. It
      must match the pod template's labels. More info:
      https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
      
      A label selector is a label query over a set of resources. The result of
      matchLabels and matchExpressions are ANDed. An empty label selector matches
      all objects. A null label selector matches no objects.
      
      

      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
        are ANDed.
        
        A label selector requirement is a selector that contains values, a key, and
        an operator that relates the key and values.
        
        

        • key (string) key is the label key that the selector applies to.
          
        • operator (string) operator represents a key's relationship to a set of values. Valid
          operators are In, NotIn, Exists and DoesNotExist.
          
        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
          values array must be non-empty. If the operator is Exists or DoesNotExist,
          the values array must be empty. This array is replaced during a strategic
          merge patch.
          
      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
        matchLabels map is equivalent to an element of matchExpressions, whose key
        field is "key", the operator is "In", and the values array contains only
        "value". The requirements are ANDed.
        
    • serviceName (string) serviceName is the name of the service that governs this StatefulSet. This
      service must exist before the StatefulSet, and is responsible for the
      network identity of the set. Pods get DNS/hostnames that follow the
      pattern: pod-specific-string.serviceName.default.svc.cluster.local where
      "pod-specific-string" is managed by the StatefulSet controller.
      
    • template (Object) template is the object that describes the pod that will be created if
      insufficient replicas are detected. Each pod stamped out by the StatefulSet
      will fulfill this Template, but have a unique identity from the rest of the
      StatefulSet.
      
      PodTemplateSpec describes the data a pod should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the pod. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        PodSpec is a description of a pod.
        
        

        • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
          StartTime before the system will actively try to mark it failed and kill
          associated containers. Value must be a positive integer.
          
        • affinity (Object) If specified, the pod's scheduling constraints
          
          Affinity is a group of affinity scheduling rules.
          
          

          • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
            
            Node affinity is a group of node affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node matches
              the corresponding matchExpressions; the node(s) with the highest sum are
              the most preferred.
              
              An empty preferred scheduling term matches all objects with implicit weight
              0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
              (i.e. is also a no-op).
              
              

              • preference (Object) A node selector term, associated with the corresponding weight.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
              • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to an update), the system may or may not try
              to eventually evict the pod from its node.
              
              A node selector represents the union of the results of one or more label
              queries over a set of nodes; that is, it represents the OR of the selectors
              represented by the node selector terms.
              
              

              • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
          • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
            same node, zone, etc. as some other pod(s)).
            
            Pod affinity is a group of inter pod affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node has pods
              which matches the corresponding podAffinityTerm; the node(s) with the
              highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to a pod label update), the system may or
              may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
          • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
            in the same node, zone, etc. as some other pod(s)).
            
            Pod anti affinity is a group of inter pod anti affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              anti-affinity expressions specified by this field, but it may choose a node
              that violates one or more of the expressions. The node that is most
              preferred is the one with the greatest sum of weights, i.e. for each node
              that meets all of the scheduling requirements (resource request,
              requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
              iterating through the elements of this field and adding "weight" to the sum
              if the node has pods which matches the corresponding podAffinityTerm; the
              node(s) with the highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              anti-affinity requirements specified by this field cease to be met at some
              point during pod execution (e.g. due to a pod label update), the system may
              or may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
        • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
          should be automatically mounted.
          
        • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
          added or removed. There must be at least one container in a Pod. Cannot be
          updated.
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
          merged to the generated DNS configuration based on DNSPolicy.
          
          PodDNSConfig defines the DNS parameters of a pod in addition to those
          generated from DNSPolicy.
          
          

          • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
            nameservers generated from DNSPolicy. Duplicated nameservers will be
            removed.
            
          • options ([]Object) A list of DNS resolver options. This will be merged with the base options
            generated from DNSPolicy. Duplicated entries will be removed. Resolution
            options given in Options will override those that appear in the base
            DNSPolicy.
            
            PodDNSConfigOption defines DNS resolver options of a pod.
            
            

            • name (string) Required.
              
            • value (string) (empty)
              
          • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
            the base search paths generated from DNSPolicy. Duplicated search paths
            will be removed.
            
        • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
          'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
          parameters given in DNSConfig will be merged with the policy selected with
          DNSPolicy. To have DNS options set along with hostNetwork, you have to
          specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
          
          
          
        • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
          injected into pod's environment variables, matching the syntax of Docker
          links. Optional: Defaults to true.
          
        • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
          run in an existing pod to perform user-initiated actions such as debugging.
          This list cannot be specified when creating a pod, and it cannot be
          modified by updating the pod spec. In order to add an ephemeral container
          to an existing pod, use the pod's ephemeralcontainers subresource. This
          field is beta-level and available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          An EphemeralContainer is a temporary container that you may add to an
          existing Pod for user-initiated activities such as debugging. Ephemeral
          containers have no resource or scheduling guarantees, and they will not be
          restarted when they exit or when a Pod is removed or restarted. The kubelet
          may evict a Pod if an ephemeral container causes the Pod to exceed its
          resource allocation.
          
          To add an ephemeral container, use the ephemeralcontainers subresource of
          an existing Pod. Ephemeral containers may not be removed or restarted.
          
          This is a beta feature available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
            unique among all containers, init containers and ephemeral containers.
            
          • ports ([]Object) Ports are not allowed for ephemeral containers.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
            use spare resources already allocated to the pod.
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
            container should be run with. If set, the fields of SecurityContext
            override the equivalent fields of PodSecurityContext.
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
            container targets. The ephemeral container will be run in the namespaces
            (IPC, PID, etc) of this container. If not set then the ephemeral container
            uses the namespaces configured in the Pod spec.
            
            The container runtime must implement support for this feature. If the
            runtime does not support namespace targeting then the result of setting
            this field is undefined.
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
            not allowed for ephemeral containers. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
          the pod's hosts file if specified. This is only valid for non-hostNetwork
          pods.
          
          HostAlias holds the mapping between IP and hostnames that will be injected
          as an entry in the pod's hosts file.
          
          

          • hostnames ([]string) Hostnames for the above IP address.
            
          • ip (string) IP address of the host file entry.
            
        • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
          
        • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
          If this option is set, the ports that will be used must be specified.
          Default to false.
          
        • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
          
        • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
          be set to a system-defined value.
          
        • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
          namespace to use for pulling any of the images used by this PodSpec. If
          specified, these secrets will be passed to individual puller
          implementations for them to use. For example, in the case of docker, only
          DockerConfig type secrets are honored. More info:
          https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
          executed in order prior to containers being started. If any init container
          fails, the pod is considered to have failed and is handled according to its
          restartPolicy. The name for an init container or normal container must be
          unique among all containers. Init containers may not have Lifecycle
          actions, Readiness probes, Liveness probes, or Startup probes. The
          resourceRequirements of an init container are taken into account during
          scheduling by finding the highest request/limit for each resource type, and
          then using the max of of that value or the sum of the normal containers.
          Limits are applied to init containers in a similar fashion. Init containers
          cannot currently be added or removed. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
          non-empty, the scheduler simply schedules this pod onto that node, assuming
          that it fits resource requirements.
          
        • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
          Selector which must match a node's labels for the pod to be scheduled on
          that node. More info:
          https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
          
        • os (Object) Specifies the OS of the containers in the pod. Some pod and container
          fields are restricted if this is set.
          
          If the OS field is set to linux, the following fields must be unset:
          -securityContext.windowsOptions
          
          If the OS field is set to windows, following fields must be unset: -
          spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
          spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
          spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
          spec.shareProcessNamespace - spec.securityContext.runAsUser -
          spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
          spec.containers[*].securityContext.seLinuxOptions -
          spec.containers[*].securityContext.seccompProfile -
          spec.containers[*].securityContext.capabilities -
          spec.containers[*].securityContext.readOnlyRootFilesystem -
          spec.containers[*].securityContext.privileged -
          spec.containers[*].securityContext.allowPrivilegeEscalation -
          spec.containers[*].securityContext.procMount -
          spec.containers[*].securityContext.runAsUser -
          spec.containers[*].securityContext.runAsGroup This is an alpha field and
          requires the IdentifyPodOS feature
          
          PodOS defines the OS parameters of a pod.
          
          

          • name (string) Name is the name of the operating system. The currently supported values
            are linux and windows. Additional value may be defined in future and can be
            one of:
            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
            Clients should expect to handle additional values and treat unrecognized
            values in this field as os: null
            
        • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
          a given RuntimeClass. This field will be autopopulated at admission time by
          the RuntimeClass admission controller. If the RuntimeClass admission
          controller is enabled, overhead must not be set in Pod create requests. The
          RuntimeClass admission controller will reject Pod create requests which
          have the overhead already set. If RuntimeClass is configured and selected
          in the PodSpec, Overhead will be set to the value defined in the
          corresponding RuntimeClass, otherwise it will remain unset and treated as
          zero. More info:
          https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
          This field is beta-level as of Kubernetes v1.18, and is only honored by
          servers that enable the PodOverhead feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
          of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
          This field is beta-level, gated by the NonPreemptingPriority feature-gate.
          
        • priority (integer) The priority value. Various system components use this field to find the
          priority of the pod. When Priority Admission Controller is enabled, it
          prevents users from setting this field. The admission controller populates
          this field from PriorityClassName. The higher the value, the higher the
          priority.
          
        • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
          "system-cluster-critical" are two special keywords which indicate the
          highest priorities with the former being the highest priority. Any other
          name must be defined by creating a PriorityClass object with that name. If
          not specified, the pod priority will be default or zero if there is no
          default.
          
        • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
          pod is ready when all its containers are ready AND all conditions specified
          in the readiness gates have status equal to "True" More info:
          https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
          
          PodReadinessGate contains the reference to a pod condition
          
          

          • conditionType (string) ConditionType refers to a condition in the pod's condition list with
            matching type.
            
            
            
        • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
          Never. Default to Always. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
          
          
          
        • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
          which should be used to run this pod. If no RuntimeClass resource matches
          the named class, the pod will not be run. If unset or empty, the "legacy"
          RuntimeClass will be used, which is an implicit class with an empty
          definition that uses the default runtime handler. More info:
          https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
          beta feature as of Kubernetes v1.14.
          
        • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
          specified, the pod will be dispatched by default scheduler.
          
        • securityContext (Object) SecurityContext holds pod-level security attributes and common container
          settings. Optional: Defaults to empty. See type description for default
          values of each field.
          
          PodSecurityContext holds pod-level security attributes and common container
          settings. Some fields are also present in container.securityContext. Field
          values of container.securityContext take precedence over field values of
          PodSecurityContext.
          
          

          • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
            volume types allow the Kubelet to change the ownership of that volume to be
            owned by the pod:
            
            1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
            created in the volume will be owned by FSGroup) 3. The permission bits are
            OR'd with rw-rw----
            
            If unset, the Kubelet will not modify the ownership and permissions of any
            volume. Note that this field cannot be set when spec.os.name is windows.
            
          • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
            of the volume before being exposed inside Pod. This field will only apply
            to volume types which support fsGroup based ownership(and permissions). It
            will have no effect on ephemeral volume types such as: secret, configmaps
            and emptydir. Valid values are "OnRootMismatch" and "Always". If not
            specified, "Always" is used. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence for that container.
            Note that this field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
            field cannot be set when spec.os.name is windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
            addition to the container's primary GID. If unspecified, no groups will be
            added to any container. Note that this field cannot be set when
            spec.os.name is windows.
            
          • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
            unsupported sysctls (by the container runtime) might fail to launch. Note
            that this field cannot be set when spec.os.name is windows.
            
            Sysctl defines a kernel parameter to be set
            
            

            • name (string) Name of a property to set
              
            • value (string) Value of a property to set
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options within a container's SecurityContext will be used. If set in
            both SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
          Deprecated: Use serviceAccountName instead.
          
        • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
          pod. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
          
        • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
          than the leaf name (the default). In Linux containers, this means setting
          the FQDN in the hostname field of the kernel (the nodename field of struct
          utsname). In Windows containers, this means setting the registry value of
          hostname for the registry key
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
          FQDN. If a pod does not have FQDN, this has no effect. Default to false.
          
        • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
          When this is set containers will be able to view and signal processes from
          other containers in the same pod, and the first process in each container
          will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
          be set. Optional: Default to false.
          
        • subdomain (string) If specified, the fully qualified Pod hostname will be
          "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
          specified, the pod will not have a domainname at all.
          
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
          decreased in delete request. Value must be non-negative integer. The value
          zero indicates stop immediately via the kill signal (no opportunity to shut
          down). If this value is nil, the default grace period will be used instead.
          The grace period is the duration in seconds after the processes running in
          the pod are sent a termination signal and the time when the processes are
          forcibly halted with a kill signal. Set this value longer than the expected
          cleanup time for your process. Defaults to 30 seconds.
          
        • tolerations ([]Object) If specified, the pod's tolerations.
          
          The pod this Toleration is attached to tolerates any taint that matches the
          triple (key,value,effect) using the matching operator (operator).
          
          

          • effect (string) Effect indicates the taint effect to match. Empty means match all taint
            effects. When specified, allowed values are NoSchedule, PreferNoSchedule
            and NoExecute.
            
            
            
          • key (string) Key is the taint key that the toleration applies to. Empty means match all
            taint keys. If the key is empty, operator must be Exists; this combination
            means to match all values and all keys.
            
          • operator (string) Operator represents a key's relationship to the value. Valid operators are
            Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
            value, so that a pod can tolerate all taints of a particular category.
            
            
            
          • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
            be of effect NoExecute, otherwise this field is ignored) tolerates the
            taint. By default, it is not set, which means tolerate the taint forever
            (do not evict). Zero and negative values will be treated as 0 (evict
            immediately) by the system.
            
          • value (string) Value is the taint value the toleration matches to. If the operator is
            Exists, the value should be empty, otherwise just a regular string.
            
        • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
          across topology domains. Scheduler will schedule pods in a way which abides
          by the constraints. All topologySpreadConstraints are ANDed.
          
          TopologySpreadConstraint specifies how to spread matching pods among the
          given topology.
          
          

          • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
            selector are counted to determine the number of pods in their corresponding
            topology domain.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
            When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
            difference between the number of matching pods in the target topology and
            the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
            and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
            zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
            to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
            ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
            incoming pod can be scheduled onto any zone. When
            `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
            topologies that satisfy it. It's a required field. Default value is 1 and 0
            is not allowed.
            
          • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
            key and identical values are considered to be in the same topology. We
            consider each (key, value) as a "bucket", and try to put balanced number of
            pods into each bucket. It's a required field.
            
          • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
            the spread constraint. - DoNotSchedule (default) tells the scheduler not to
            schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
            any location, but giving higher precedence to topologies that would help
            reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
            pod if and only if every possible node assignment for that pod would
            violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
            MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
            | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
            DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
            3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
            other words, the cluster can still be imbalanced, but scheduler won't make
            it *more* imbalanced. It's a required field.
            
            
            
        • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
          More info: https://kubernetes.io/docs/concepts/storage/volumes
          
          Volume represents a named volume in a pod that may be accessed by any
          container in the pod.
          
          

          • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
            Represents a Persistent Disk resource in AWS.
            An AWS EBS disk must exist before mounting to a container. The disk must
            also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
            mounted as read/write once. AWS EBS volumes support ownership management
            and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty).
              
            • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
              "true". If omitted, the default is "false". More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
              info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
          • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            

            • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
              
            • diskName (string) The Name of the data disk in the blob storage
              
            • diskURI (string) The URI the data disk in the blob storage
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
              single blob disk per storage account Managed: azure managed data disk (only
              in managed availability set). defaults to shared
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
          • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            

            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretName (string) the name of secret that contains Azure Storage Account Name and Key
              
            • shareName (string) Share Name
              
          • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
            
            Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
              is /
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
              /etc/ceph/user.secret More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
              default is empty. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) Optional: User is the rados user name, default is admin More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
          • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
            machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
            
            Represents a cinder volume resource in Openstack. A Cinder volume must
            exist before mounting to a container. The volume must also be in the same
            region as the kubelet. Cinder volumes support ownership management and
            SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
              be "ext4" if unspecified. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • secretRef (Object) Optional: points to a secret object containing parameters used to connect
              to OpenStack.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeID (string) volume id used to identify the volume in cinder. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
          • configMap (Object) ConfigMap represents a configMap that should populate this volume
            
            Adapts a ConfigMap into a volume.
            The contents of the target ConfigMap's Data field will be presented in a
            volume as files using the keys in the Data field as the file names, unless
            the items element is populated with specific mappings of keys to paths.
            ConfigMap volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
            handled by certain external CSI drivers (Beta feature).
            
            Represents a source location of a volume to mount, managed by an external
            CSI driver
            
            

            • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
              your admin for the correct name as registered in the cluster.
              
            • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
              empty value is passed to the associated CSI driver which will determine the
              default filesystem to apply.
              
            • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
              sensitive information to pass to the CSI driver to complete the CSI
              NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
              and may be empty if no secret is required. If the secret object contains
              more than one secret, all secret references are passed.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
              (read/write).
              
            • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
              CSI driver. Consult your driver's documentation for supported values.
              
          • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
            volume
            
            DownwardAPIVolumeSource represents a volume containing downward API info.
            Downward API volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
              mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) Items is a list of downward API volume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
            Represents an empty directory for a pod. Empty directory volumes support
            ownership management and SELinux relabeling.
            
            

            • medium (string) What type of storage medium should back this directory. The default is ""
              which means to use the node's default medium. Must be an empty string
              (default) or Memory. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              
            • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
              limit is also applicable for memory medium. The maximum usage on memory
              medium EmptyDir would be the minimum value between the SizeLimit specified
              here and the sum of memory limits of all containers in a pod. The default
              is nil which means that the limit is undefined. More info:
              http://kubernetes.io/docs/user-guide/volumes#emptydir
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
            The volume's lifecycle is tied to the pod that defines it - it will be
            created before the pod starts, and deleted when the pod is removed.
            
            Use this if: a) the volume is only needed while the pod runs, b) features
            of normal volumes like restoring from snapshot or capacity tracking are
            needed, c) the storage driver is specified through a storage class, and d)
            the storage driver supports dynamic volume provisioning through a
            PersistentVolumeClaim (see EphemeralVolumeSource for more information on
            the connection between this volume type and PersistentVolumeClaim).
            
            Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
            that persist for longer than the lifecycle of an individual pod.
            
            Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
            to be used that way - see the documentation of the driver for more
            information.
            
            A pod can use both types of ephemeral volumes and persistent volumes at the
            same time.
            
            Represents an ephemeral volume that is handled by a normal storage driver.
            
            

            • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
              in which this EphemeralVolumeSource is embedded will be the owner of the
              PVC, i.e. the PVC will be deleted together with the pod. The name of the
              PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
              from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
              if the concatenated name is not valid for a PVC (for example, too long).
              
              An existing PVC with that name that is not owned by the pod will *not* be
              used for the pod to avoid using an unrelated volume by mistake. Starting
              the pod is then blocked until the unrelated PVC is removed. If such a
              pre-created PVC is meant to be used by the pod, the PVC has to updated with
              an owner reference to the pod once the pod exists. Normally this should not
              be necessary, but it may be useful when manually reconstructing a broken
              cluster.
              
              This field is read-only and no changes will be made by Kubernetes to the
              PVC after it has been created.
              
              Required, must not be nil.
              
              PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
              objects as part of an EphemeralVolumeSource.
              
              

              • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                creating it. No other fields are allowed and will be rejected during
                validation.
                
                ObjectMeta is metadata that all persisted resources must have, which
                includes all objects users must create.
                
                

                • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                  may be set by external tools to store and retrieve arbitrary metadata. They
                  are not queryable and should be preserved when modifying objects. More
                  info: http://kubernetes.io/docs/user-guide/annotations
                  
                • clusterName (string) The name of the cluster which the object belongs to. This is used to
                  distinguish resources with same name and namespace in different clusters.
                  This field is not set anywhere right now and apiserver is going to ignore
                  it if set in create or update request.
                  
                • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                  object was created. It is not guaranteed to be set in happens-before order
                  across separate operations. Clients may not set this value. It is
                  represented in RFC3339 form and is in UTC.
                  
                  Populated by the system. Read-only. Null for lists. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                  will be removed from the system. Only set when deletionTimestamp is also
                  set. May only be shortened. Read-only.
                  
                • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                  deleted. This field is set by the server when a graceful deletion is
                  requested by the user, and is not directly settable by a client. The
                  resource is expected to be deleted (no longer visible from resource lists,
                  and not reachable by name) after the time in this field, once the
                  finalizers list is empty. As long as the finalizers list contains items,
                  deletion is blocked. Once the deletionTimestamp is set, this value may not
                  be unset or be set further into the future, although it may be shortened or
                  the resource may be deleted prior to this time. For example, a user may
                  request that a pod is deleted in 30 seconds. The Kubelet will react by
                  sending a graceful termination signal to the containers in the pod. After
                  that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                  to the container and after cleanup, remove the pod from the API. In the
                  presence of network partitions, this object may still exist after this
                  timestamp, until an administrator or automated process can determine the
                  resource is fully terminated. If not set, graceful deletion of the object
                  has not been requested.
                  
                  Populated by the system when a graceful deletion is requested. Read-only.
                  More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                  an identifier for the responsible component that will remove the entry from
                  the list. If the deletionTimestamp of the object is non-nil, entries in
                  this list can only be removed. Finalizers may be processed and removed in
                  any order. Order is NOT enforced because it introduces significant risk of
                  stuck finalizers. finalizers is a shared field, any actor with permission
                  can reorder it. If the finalizer list is processed in order, then this can
                  lead to a situation in which the component responsible for the first
                  finalizer in the list is waiting for a signal (field value, external
                  system, or other) produced by a component responsible for a finalizer later
                  in the list, resulting in a deadlock. Without enforced ordering finalizers
                  are free to order amongst themselves and are not vulnerable to ordering
                  changes in the list.
                  
                • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                  unique name ONLY IF the Name field has not been provided. If this field is
                  used, the name returned to the client will be different than the name
                  passed. This value will also be combined with a unique suffix. The provided
                  value has the same validation rules as the Name field, and may be truncated
                  by the length of the suffix required to make the value unique on the
                  server.
                  
                  If this field is specified and the generated name exists, the server will
                  NOT return a 409 - instead, it will either return 201 Created or 500 with
                  Reason ServerTimeout indicating a unique name could not be found in the
                  time allotted, and the client should retry (optionally after the time
                  indicated in the Retry-After header).
                  
                  Applied only if Name is not specified. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                  
                • generation (integer) A sequence number representing a specific generation of the desired state.
                  Populated by the system. Read-only.
                  
                • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                  (scope and select) objects. May match selectors of replication controllers
                  and services. More info: http://kubernetes.io/docs/user-guide/labels
                  
                • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                  managed by that workflow. This is mostly for internal housekeeping, and
                  users typically shouldn't need to set or understand this field. A workflow
                  can be the user's name, a controller's name, or the name of a specific
                  apply path like "ci-cd". The set of fields is always in the version that
                  the workflow used when modifying the object.
                  
                  ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                  the resource that the fieldset applies to.
                  
                  

                  • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                    to. The format is "group/version" just like the top-level APIVersion field.
                    It is necessary to track the version of a field set because it cannot be
                    automatically converted.
                    
                  • fieldsType (string) FieldsType is the discriminator for the different fields format and
                    version. There is currently only one possible value: "FieldsV1"
                    
                  • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                    type.
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                  • manager (string) Manager is an identifier of the workflow managing these fields.
                    
                  • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                    being created. The only valid values for this field are 'Apply' and
                    'Update'.
                    
                  • subresource (string) Subresource is the name of the subresource used to update that object, or
                    empty string if the object was updated through the main resource. The value
                    of this field is used to distinguish between managers, even if they share
                    the same name. For example, a status update will be distinct from a regular
                    update using the same manager name. Note that the APIVersion field is not
                    related to the Subresource field and it always corresponds to the version
                    of the main resource.
                    
                  • time (string) Time is timestamp of when these fields were set. It should always be empty
                    if Operation is 'Apply'
                    
                    Time is a wrapper around time.Time which supports correct marshaling to
                    YAML and JSON. Wrappers are provided for many of the factory methods that
                    the time package offers.
                    
                • name (string) Name must be unique within a namespace. Is required when creating
                  resources, although some resources may allow a client to request the
                  generation of an appropriate name automatically. Name is primarily intended
                  for creation idempotence and configuration definition. Cannot be updated.
                  More info: http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • namespace (string) Namespace defines the space within which each name must be unique. An empty
                  namespace is equivalent to the "default" namespace, but "default" is the
                  canonical representation. Not all objects are required to be scoped to a
                  namespace - the value of this field for those objects will be empty.
                  
                  Must be a DNS_LABEL. Cannot be updated. More info:
                  http://kubernetes.io/docs/user-guide/namespaces
                  
                • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                  been deleted, this object will be garbage collected. If this object is
                  managed by a controller, then an entry in this list will point to this
                  controller, with the controller field set to true. There cannot be more
                  than one managing controller.
                  
                  OwnerReference contains enough information to let you identify an owning
                  object. An owning object must be in the same namespace as the dependent, or
                  be cluster-scoped, so there is no namespace field.
                  
                  

                  • apiVersion (string) API version of the referent.
                    
                  • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                    owner cannot be deleted from the key-value store until this reference is
                    removed. Defaults to false. To set this field, a user needs "delete"
                    permission of the owner, otherwise 422 (Unprocessable Entity) will be
                    returned.
                    
                  • controller (boolean) If true, this reference points to the managing controller.
                    
                  • kind (string) Kind of the referent. More info:
                    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    
                  • name (string) Name of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#names
                    
                  • uid (string) UID of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#uids
                    
                • resourceVersion (string) An opaque value that represents the internal version of this object that
                  can be used by clients to determine when objects have changed. May be used
                  for optimistic concurrency, change detection, and the watch operation on a
                  resource or set of resources. Clients must treat these values as opaque and
                  passed unmodified back to the server. They may only be valid for a
                  particular resource or set of resources.
                  
                  Populated by the system. Read-only. Value must be treated as opaque by
                  clients and . More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                  
                • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                  Read-only.
                  
                  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                  the field is planned to be removed in 1.21 release.
                  
                • uid (string) UID is the unique in time and space value for this object. It is typically
                  generated by the server on successful creation of a resource and is not
                  allowed to change on PUT operations.
                  
                  Populated by the system. Read-only. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                copied unchanged into the PVC that gets created from this template. The
                same fields as in a PersistentVolumeClaim are also valid here.
                
                PersistentVolumeClaimSpec describes the common attributes of storage
                devices and allows a Source for provider-specific attributes
                
                

                • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                  info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                  
                • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                  object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                  (PersistentVolumeClaim) If the provisioner or an external controller can
                  support the specified data source, it will create a new volume based on the
                  contents of the specified data source. If the AnyVolumeDataSource feature
                  gate is enabled, this field will always have the same contents as the
                  DataSourceRef field.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                  non-empty volume is desired. This may be any local object from a non-empty
                  API group (non core object) or a PersistentVolumeClaim object. When this
                  field is specified, volume binding will only succeed if the type of the
                  specified object matches some installed volume populator or dynamic
                  provisioner. This field will replace the functionality of the DataSource
                  field and as such if both fields are non-empty, they must have the same
                  value. For backwards compatibility, both fields (DataSource and
                  DataSourceRef) will be set to the same value automatically if one of them
                  is empty and the other is non-empty. There are two important differences
                  between DataSource and DataSourceRef: * While DataSource only allows two
                  specific types of objects, DataSourceRef allows any non-core object, as
                  well as PersistentVolumeClaim objects.
                  * While DataSource ignores disallowed values (dropping them), DataSourceRef
                  preserves all values, and generates an error if a disallowed value is
                  specified. (Alpha) Using this field requires the AnyVolumeDataSource
                  feature gate to be enabled.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • resources (Object) Resources represents the minimum resources the volume should have. If
                  RecoverVolumeExpansionFailure feature is enabled users are allowed to
                  specify resource requirements that are lower than previous value but must
                  still be higher than capacity recorded in the status field of the claim.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                  
                  ResourceRequirements describes the compute resource requirements.
                  
                  

                  • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                    Requests is omitted for a container, it defaults to Limits if that is
                    explicitly specified, otherwise to an implementation-defined value. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                • selector (Object) A label query over volumes to consider for binding.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • storageClassName (string) Name of the StorageClass required by the claim. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                  
                • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                  Filesystem is implied when not included in claim spec.
                  
                • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                  claim.
                  
          • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
            machine and then exposed to the pod.
            
            Represents a Fibre Channel volume. Fibre Channel volumes can only be
            mounted as read/write once. Fibre Channel volumes support ownership
            management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • lun (integer) Optional: FC target lun number
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
              
            • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
              combination of targetWWNs and lun must be set, but not both simultaneously.
              
          • flexVolume (Object) FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            

            • driver (string) Driver is the name of the driver to use for this volume.
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
              on FlexVolume script.
              
            • options (map[string]string) Optional: Extra command options if any.
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
              information to pass to the plugin scripts. This may be empty if no secret
              object is specified. If the secret object contains more than one secret,
              all secrets are passed to the plugin scripts.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
          • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
            This depends on the Flocker control service being running
            
            Represents a Flocker volume mounted by the Flocker agent. One and only one
            of datasetName and datasetUUID should be set. Flocker volumes do not
            support ownership management or SELinux relabeling.
            
            

            • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
              should be considered as deprecated
              
            • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
              
          • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
            Represents a Persistent Disk resource in Google Compute Engine.
            A GCE PD must exist before mounting to a container. The disk must also be
            in the same GCE project and zone as the kubelet. A GCE PD can only be
            mounted as read/write once or read-only many times. GCE PDs support
            ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty). More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
          • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
            GitRepo is deprecated. To provision a container with a git repo, mount an
            EmptyDir into an InitContainer that clones the repo using git, then mount
            the EmptyDir into the Pod's container.
            
            Represents a volume that is populated with the contents of a git
            repository. Git repo volumes do not support ownership management. Git repo
            volumes support SELinux relabeling.
            
            DEPRECATED: GitRepo is deprecated. To provision a container with a git
            repo, mount an EmptyDir into an InitContainer that clones the repo using
            git, then mount the EmptyDir into the Pod's container.
            
            

            • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
              supplied, the volume directory will be the git repository. Otherwise, if
              specified, the volume will contain the git repository in the subdirectory
              with the given name.
              
            • repository (string) Repository URL
              
            • revision (string) Commit hash for the specified revision.
              
          • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
            
            Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
              info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • path (string) Path is the Glusterfs volume path. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
              permissions. Defaults to false. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
          • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
            that is directly exposed to the container. This is generally used for
            system agents or other privileged things that are allowed to see the host
            machine. Most containers will NOT need this. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
            Represents a host path mapped into a pod. Host path volumes do not support
            ownership management or SELinux relabeling.
            
            

            • path (string) Path of the directory on the host. If the path is a symlink, it will follow
              the link to the real path. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
            • type (string) Type for HostPath Volume Defaults to "" More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
          • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
            host machine and then exposed to the pod. More info:
            https://examples.k8s.io/volumes/iscsi/README.md
            
            Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
            once. ISCSI volumes support ownership management and SELinux relabeling.
            
            

            • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
              
            • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
              
            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
              
            • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
              iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
              name) will be created for the connection.
              
            • iqn (string) Target iSCSI Qualified Name.
              
            • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
              (tcp).
              
            • lun (integer) iSCSI Target Lun number.
              
            • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
              port is other than default (typically TCP ports 860 and 3260).
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false.
              
            • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
              is other than default (typically TCP ports 860 and 3260).
              
          • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
            Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
            not support ownership management or SELinux relabeling.
            
            

            • path (string) Path that is exported by the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
              permissions. Defaults to false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • server (string) Server is the hostname or IP address of the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
          • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
            PersistentVolumeClaim in the same namespace. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
            PersistentVolumeClaimVolumeSource references the user's PVC in the same
            namespace. This volume finds the bound PV and mounts that volume for the
            pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
            another type of volume that is owned by someone else (the system).
            
            

            • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
              the pod using this volume. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
              
            • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
              
          • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
            and mounted on kubelets host machine
            
            Represents a Photon Controller persistent disk resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • pdID (string) ID that identifies Photon Controller persistent disk
              
          • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
            kubelets host machine
            
            PortworxVolumeSource represents a Portworx volume resource.
            
            

            • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
              supported by the host operating system. Ex. "ext4", "xfs". Implicitly
              inferred to be "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • volumeID (string) VolumeID uniquely identifies a Portworx volume
              
          • projected (Object) Items for all in one resources secrets, configmaps, and downward API
            
            Represents a projected volume source
            
            

            • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Directories within the path are not affected by this
              setting. This might be in conflict with other options that affect the file
              mode, like fsGroup, and the result can be other mode bits set.
              
            • sources ([]Object) list of volume projections
              
              Projection that may be projected along with other supported volume types
              
              

              • configMap (Object) information about the configMap data to project
                
                Adapts a ConfigMap into a projected volume.
                The contents of the target ConfigMap's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names, unless the items element is populated with specific mappings of keys
                to paths. Note that this is identical to a configmap volume source without
                the default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • downwardAPI (Object) information about the downwardAPI data to project
                
                Represents downward API info for projecting into a projected volume. Note
                that this is identical to a downwardAPI volume source without the default
                mode.
                
                

                • items ([]Object) Items is a list of DownwardAPIVolume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • secret (Object) information about the secret data to project
                
                Adapts a secret into a projected volume.
                The contents of the target Secret's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names. Note that this is identical to a secret volume source without the
                default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
              • serviceAccountToken (Object) information about the serviceAccountToken data to project
                
                ServiceAccountTokenProjection represents a projected service account token
                volume. This projection can be used to insert a service account token into
                the pods runtime filesystem for use against APIs (Kubernetes API Server or
                otherwise).
                
                

                • audience (string) Audience is the intended audience of the token. A recipient of a token must
                  identify itself with an identifier specified in the audience of the token,
                  and otherwise should reject the token. The audience defaults to the
                  identifier of the apiserver.
                  
                • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                  account token. As the token approaches expiration, the kubelet volume
                  plugin will proactively rotate the service account token. The kubelet will
                  start trying to rotate the token if the token is older than 80 percent of
                  its time to live or if the token is older than 24 hours.Defaults to 1 hour
                  and must be at least 10 minutes.
                  
                • path (string) Path is the path relative to the mount point of the file to project the
                  token into.
                  
          • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
            
            Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
            volumes do not support ownership management or SELinux relabeling.
            
            

            • group (string) Group to map volume access to Default is no group
              
            • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
              permissions. Defaults to false.
              
            • registry (string) Registry represents a single or multiple Quobyte Registry services
              specified as a string as host:port pair (multiple entries are separated
              with commas) which acts as the central registry for volumes
              
            • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
              provisioned Quobyte volumes, value is set by the plugin
              
            • user (string) User to map volume access to Defaults to serivceaccount user
              
            • volume (string) Volume is a string that references an already created Quobyte volume by
              name.
              
          • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
            
            Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
            volumes support ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
              
            • image (string) The rados image name. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
              More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • monitors ([]string) A collection of Ceph monitors. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • pool (string) The rados pool name. Default is rbd. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
              overrides keyring. Default is nil. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) The rados user name. Default is admin. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
          • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
            Kubernetes nodes.
            
            ScaleIOVolumeSource represents a persistent ScaleIO volume
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
              
            • gateway (string) The host address of the ScaleIO API Gateway.
              
            • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
              information. If this is not provided, Login operation will fail.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
              
            • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
              ThinProvisioned. Default is ThinProvisioned.
              
            • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
              
            • system (string) The name of the storage system as configured in ScaleIO.
              
            • volumeName (string) The name of a volume already created in the ScaleIO system that is
              associated with this volume source.
              
          • secret (Object) Secret represents a secret that should populate this volume. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
            Adapts a Secret into a volume.
            The contents of the target Secret's Data field will be presented in a
            volume as files using the keys in the Data field as the file names. Secret
            volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • optional (boolean) Specify whether the Secret or its keys must be defined
              
            • secretName (string) Name of the secret in the pod's namespace to use. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#secret
              
          • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
            nodes.
            
            Represents a StorageOS persistent volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
              credentials. If not specified, default values will be attempted.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
              are only unique within a namespace.
              
            • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
              namespace is specified then the Pod's namespace will be used. This allows
              the Kubernetes name scoping to be mirrored within StorageOS for tighter
              integration. Set VolumeName to any name to override the default behaviour.
              Set to "default" if you are not using namespaces within StorageOS.
              Namespaces that do not pre-exist within StorageOS will be created.
              
          • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
            host machine
            
            Represents a vSphere volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
              StoragePolicyName.
              
            • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
              
            • volumePath (string) Path that identifies vSphere volume vmdk
              
    • updateStrategy (Object) updateStrategy indicates the StatefulSetUpdateStrategy that will be
      employed to update Pods in the StatefulSet when a revision is made to
      Template.
      
      StatefulSetUpdateStrategy indicates the strategy that the StatefulSet
      controller will use to perform updates. It includes any additional
      parameters necessary to perform the update for the indicated strategy.
      
      

      • rollingUpdate (Object) RollingUpdate is used to communicate parameters when Type is
        RollingUpdateStatefulSetStrategyType.
        
        RollingUpdateStatefulSetStrategy is used to communicate parameter for
        RollingUpdateStatefulSetStrategyType.
        
        

        • partition (integer) Partition indicates the ordinal at which the StatefulSet should be
          partitioned. Default value is 0.
          
      • type (string) Type indicates the type of the StatefulSetUpdateStrategy. Default is
        RollingUpdate.
        
        
        
    • volumeClaimTemplates ([]Object) volumeClaimTemplates is a list of claims that pods are allowed to
      reference. The StatefulSet controller is responsible for mapping network
      identities to claims in a way that maintains the identity of a pod. Every
      claim in this list must have at least one matching (by name) volumeMount in
      one container in the template. A claim in this list takes precedence over
      any volumes in the template, with the same name.
      
      PersistentVolumeClaim is a user's request for and claim to a persistent
      volume
      
      

      • apiVersion (string) APIVersion defines the versioned schema of this representation of an
        object. Servers should convert recognized schemas to the latest internal
        value, and may reject unrecognized values. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
        
      • kind (string) Kind is a string value representing the REST resource this object
        represents. Servers may infer this from the endpoint the client submits
        requests to. Cannot be updated. In CamelCase. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Spec defines the desired characteristics of a volume requested by a pod
        author. More info:
        https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
        
        PersistentVolumeClaimSpec describes the common attributes of storage
        devices and allows a Source for provider-specific attributes
        
        

        • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
          info:
          https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
          
        • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
          object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
          (PersistentVolumeClaim) If the provisioner or an external controller can
          support the specified data source, it will create a new volume based on the
          contents of the specified data source. If the AnyVolumeDataSource feature
          gate is enabled, this field will always have the same contents as the
          DataSourceRef field.
          
          TypedLocalObjectReference contains enough information to let you locate the
          typed referenced object inside the same namespace.
          
          

          • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
            specified, the specified Kind must be in the core API group. For any other
            third-party types, APIGroup is required.
            
          • kind (string) Kind is the type of resource being referenced
            
          • name (string) Name is the name of resource being referenced
            
        • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
          non-empty volume is desired. This may be any local object from a non-empty
          API group (non core object) or a PersistentVolumeClaim object. When this
          field is specified, volume binding will only succeed if the type of the
          specified object matches some installed volume populator or dynamic
          provisioner. This field will replace the functionality of the DataSource
          field and as such if both fields are non-empty, they must have the same
          value. For backwards compatibility, both fields (DataSource and
          DataSourceRef) will be set to the same value automatically if one of them
          is empty and the other is non-empty. There are two important differences
          between DataSource and DataSourceRef: * While DataSource only allows two
          specific types of objects, DataSourceRef allows any non-core object, as
          well as PersistentVolumeClaim objects.
          * While DataSource ignores disallowed values (dropping them), DataSourceRef
          preserves all values, and generates an error if a disallowed value is
          specified. (Alpha) Using this field requires the AnyVolumeDataSource
          feature gate to be enabled.
          
          TypedLocalObjectReference contains enough information to let you locate the
          typed referenced object inside the same namespace.
          
          

          • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
            specified, the specified Kind must be in the core API group. For any other
            third-party types, APIGroup is required.
            
          • kind (string) Kind is the type of resource being referenced
            
          • name (string) Name is the name of resource being referenced
            
        • resources (Object) Resources represents the minimum resources the volume should have. If
          RecoverVolumeExpansionFailure feature is enabled users are allowed to
          specify resource requirements that are lower than previous value but must
          still be higher than capacity recorded in the status field of the claim.
          More info:
          https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
          
          ResourceRequirements describes the compute resource requirements.
          
          

          • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
            Requests is omitted for a container, it defaults to Limits if that is
            explicitly specified, otherwise to an implementation-defined value. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • selector (Object) A label query over volumes to consider for binding.
          
          A label selector is a label query over a set of resources. The result of
          matchLabels and matchExpressions are ANDed. An empty label selector matches
          all objects. A null label selector matches no objects.
          
          

          • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
            are ANDed.
            
            A label selector requirement is a selector that contains values, a key, and
            an operator that relates the key and values.
            
            

            • key (string) key is the label key that the selector applies to.
              
            • operator (string) operator represents a key's relationship to a set of values. Valid
              operators are In, NotIn, Exists and DoesNotExist.
              
            • values ([]string) values is an array of string values. If the operator is In or NotIn, the
              values array must be non-empty. If the operator is Exists or DoesNotExist,
              the values array must be empty. This array is replaced during a strategic
              merge patch.
              
          • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
            matchLabels map is equivalent to an element of matchExpressions, whose key
            field is "key", the operator is "In", and the values array contains only
            "value". The requirements are ANDed.
            
        • storageClassName (string) Name of the StorageClass required by the claim. More info:
          https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
          
        • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
          Filesystem is implied when not included in claim spec.
          
        • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
          claim.
          
      • status (Object) Status represents the current information/status of a persistent volume
        claim. Read-only. More info:
        https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
        
        PersistentVolumeClaimStatus is the current status of a persistent volume
        claim.
        
        

        • accessModes ([]string) AccessModes contains the actual access modes the volume backing the PVC
          has. More info:
          https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
          
        • allocatedResources (map[string]string) The storage resource within AllocatedResources tracks the capacity
          allocated to a PVC. It may be larger than the actual capacity when a volume
          expansion operation is requested. For storage quota, the larger value from
          allocatedResources and PVC.spec.resources is used. If allocatedResources is
          not set, PVC.spec.resources alone is used for quota calculation. If a
          volume expansion capacity request is lowered, allocatedResources is only
          lowered if there are no expansion operations in progress and if the actual
          volume capacity is equal or lower than the requested capacity. This is an
          alpha field and requires enabling RecoverVolumeExpansionFailure feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • capacity (map[string]string) Represents the actual resources of the underlying volume.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • conditions ([]Object) Current Condition of persistent volume claim. If underlying persistent
          volume is being resized then the Condition will be set to 'ResizeStarted'.
          
          PersistentVolumeClaimCondition contails details about state of pvc
          
          

          • lastProbeTime (string) Last time we probed the condition.
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • lastTransitionTime (string) Last time the condition transitioned from one status to another.
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
          • message (string) Human-readable message indicating details about last transition.
            
          • reason (string) Unique, this should be a short, machine understandable string that gives
            the reason for condition's last transition. If it reports "ResizeStarted"
            that means the underlying persistent volume is being resized.
            
          • status (string) (empty)
            
          • type (string)
        • phase (string) Phase represents the current phase of PersistentVolumeClaim.
          
          
        • resizeStatus (string) ResizeStatus stores status of resize operation. ResizeStatus is not set by
          default but when expansion is complete resizeStatus is set to empty string
          by resize controller or kubelet. This is an alpha field and requires
          enabling RecoverVolumeExpansionFailure feature.
          
  • status (Object) Status is the current status of Pods in this StatefulSet. This data may be
    out of date by some window of time.
    
    StatefulSetStatus represents the current state of a StatefulSet.
    
    

    • availableReplicas (integer) Total number of available pods (ready for at least minReadySeconds)
      targeted by this statefulset. This is a beta field and enabled/disabled by
      StatefulSetMinReadySeconds feature gate.
      
    • collisionCount (integer) collisionCount is the count of hash collisions for the StatefulSet. The
      StatefulSet controller uses this field as a collision avoidance mechanism
      when it needs to create the name for the newest ControllerRevision.
      
    • conditions ([]Object) Represents the latest available observations of a statefulset's current
      state.
      
      StatefulSetCondition describes the state of a statefulset at a certain
      point.
      
      

      • lastTransitionTime (string) Last time the condition transitioned from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) A human readable message indicating details about the transition.
        
      • reason (string) The reason for the condition's last transition.
        
      • status (string) Status of the condition, one of True, False, Unknown.
        
      • type (string) Type of statefulset condition.
        
    • currentReplicas (integer) currentReplicas is the number of Pods created by the StatefulSet controller
      from the StatefulSet version indicated by currentRevision.
      
    • currentRevision (string) currentRevision, if not empty, indicates the version of the StatefulSet
      used to generate Pods in the sequence [0,currentReplicas).
      
    • observedGeneration (integer) observedGeneration is the most recent generation observed for this
      StatefulSet. It corresponds to the StatefulSet's generation, which is
      updated on mutation by the API Server.
      
    • readyReplicas (integer) readyReplicas is the number of pods created for this StatefulSet with a
      Ready Condition.
      
    • replicas (integer) replicas is the number of Pods created by the StatefulSet controller.
      
    • updateRevision (string) updateRevision, if not empty, indicates the version of the StatefulSet used
      to generate Pods in the sequence [replicas-updatedReplicas,replicas)
      
    • updatedReplicas (integer) updatedReplicas is the number of Pods created by the StatefulSet controller
      from the StatefulSet version indicated by updateRevision.
      
• CronJob CronJob represents the configuration of a single cron job.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Specification of the desired behavior of a cron job, including the
    schedule. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    CronJobSpec describes how the job execution will look like and when it will
    actually run.
    
    

    • concurrencyPolicy (string) Specifies how to treat concurrent executions of a Job. Valid values are: -
      "Allow" (default): allows CronJobs to run concurrently; - "Forbid": forbids
      concurrent runs, skipping next run if previous run hasn't finished yet; -
      "Replace": cancels currently running job and replaces it with a new one
      
      
      
    • failedJobsHistoryLimit (integer) The number of failed finished jobs to retain. Value must be non-negative
      integer. Defaults to 1.
      
    • jobTemplate (Object) Specifies the job that will be created when executing a CronJob.
      
      JobTemplateSpec describes the data a Job should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata of the jobs created from this template. More
        info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the job. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        JobSpec describes how the job execution will look like.
        
        

        • activeDeadlineSeconds (integer) Specifies the duration in seconds relative to the startTime that the job
          may be continuously active before the system tries to terminate it; value
          must be positive integer. If a Job is suspended (at creation or through an
          update), this timer will effectively be stopped and reset when the Job is
          resumed again.
          
        • backoffLimit (integer) Specifies the number of retries before marking this job failed. Defaults to
          6
          
        • completionMode (string) CompletionMode specifies how Pod completions are tracked. It can be
          `NonIndexed` (default) or `Indexed`.
          
          `NonIndexed` means that the Job is considered complete when there have been
          .spec.completions successfully completed Pods. Each Pod completion is
          homologous to each other.
          
          `Indexed` means that the Pods of a Job get an associated completion index
          from 0 to (.spec.completions - 1), available in the annotation
          batch.kubernetes.io/job-completion-index. The Job is considered complete
          when there is one successfully completed Pod for each index. When value is
          `Indexed`, .spec.completions must be specified and `.spec.parallelism` must
          be less than or equal to 10^5. In addition, The Pod name takes the form
          `$(job-name)-$(index)-$(random-string)`, the Pod hostname takes the form
          `$(job-name)-$(index)`.
          
          This field is beta-level. More completion modes can be added in the future.
          If the Job controller observes a mode that it doesn't recognize, the
          controller skips updates for the Job.
          
        • completions (integer) Specifies the desired number of successfully finished pods the job should
          be run with. Setting to nil means that the success of any pod signals the
          success of all pods, and allows parallelism to have any positive value.
          Setting to 1 means that parallelism is limited to 1 and the success of that
          pod signals the success of the job. More info:
          https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
          
        • manualSelector (boolean) manualSelector controls generation of pod labels and pod selectors. Leave
          `manualSelector` unset unless you are certain what you are doing. When
          false or unset, the system pick labels unique to this job and appends those
          labels to the pod template. When true, the user is responsible for picking
          unique labels and specifying the selector. Failure to pick a unique label
          may cause this and other jobs to not function correctly. However, You may
          see `manualSelector=true` in jobs that were created with the old
          `extensions/v1beta1` API. More info:
          https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector
          
        • parallelism (integer) Specifies the maximum desired number of pods the job should run at any
          given time. The actual number of pods running in steady state will be less
          than this number when ((.spec.completions - .status.successful) (
          .spec.parallelism), i.e. when the work left to do is less than max
          parallelism. More info:
          https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
          
        • selector (Object) A label query over pods that should match the pod count. Normally, the
          system sets this field for you. More info:
          https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
          
          A label selector is a label query over a set of resources. The result of
          matchLabels and matchExpressions are ANDed. An empty label selector matches
          all objects. A null label selector matches no objects.
          
          

          • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
            are ANDed.
            
            A label selector requirement is a selector that contains values, a key, and
            an operator that relates the key and values.
            
            

            • key (string) key is the label key that the selector applies to.
              
            • operator (string) operator represents a key's relationship to a set of values. Valid
              operators are In, NotIn, Exists and DoesNotExist.
              
            • values ([]string) values is an array of string values. If the operator is In or NotIn, the
              values array must be non-empty. If the operator is Exists or DoesNotExist,
              the values array must be empty. This array is replaced during a strategic
              merge patch.
              
          • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
            matchLabels map is equivalent to an element of matchExpressions, whose key
            field is "key", the operator is "In", and the values array contains only
            "value". The requirements are ANDed.
            
        • suspend (boolean) Suspend specifies whether the Job controller should create Pods or not. If
          a Job is created with suspend set to true, no Pods are created by the Job
          controller. If a Job is suspended after creation (i.e. the flag goes from
          false to true), the Job controller will delete all active Pods associated
          with this Job. Users must design their workload to gracefully handle this.
          Suspending a Job will reset the StartTime field of the Job, effectively
          resetting the ActiveDeadlineSeconds timer too. Defaults to false.
          
          This field is beta-level, gated by SuspendJob feature flag (enabled by
          default).
          
        • template (Object) Describes the pod that will be created when executing a job. More info:
          https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
          
          PodTemplateSpec describes the data a pod should have when created from a
          template
          
          

          • metadata (Object) Standard object's metadata. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
            
            ObjectMeta is metadata that all persisted resources must have, which
            includes all objects users must create.
            
            

            • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
              may be set by external tools to store and retrieve arbitrary metadata. They
              are not queryable and should be preserved when modifying objects. More
              info: http://kubernetes.io/docs/user-guide/annotations
              
            • clusterName (string) The name of the cluster which the object belongs to. This is used to
              distinguish resources with same name and namespace in different clusters.
              This field is not set anywhere right now and apiserver is going to ignore
              it if set in create or update request.
              
            • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
              object was created. It is not guaranteed to be set in happens-before order
              across separate operations. Clients may not set this value. It is
              represented in RFC3339 form and is in UTC.
              
              Populated by the system. Read-only. Null for lists. More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
              
              Time is a wrapper around time.Time which supports correct marshaling to
              YAML and JSON. Wrappers are provided for many of the factory methods that
              the time package offers.
              
            • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
              will be removed from the system. Only set when deletionTimestamp is also
              set. May only be shortened. Read-only.
              
            • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
              deleted. This field is set by the server when a graceful deletion is
              requested by the user, and is not directly settable by a client. The
              resource is expected to be deleted (no longer visible from resource lists,
              and not reachable by name) after the time in this field, once the
              finalizers list is empty. As long as the finalizers list contains items,
              deletion is blocked. Once the deletionTimestamp is set, this value may not
              be unset or be set further into the future, although it may be shortened or
              the resource may be deleted prior to this time. For example, a user may
              request that a pod is deleted in 30 seconds. The Kubelet will react by
              sending a graceful termination signal to the containers in the pod. After
              that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
              to the container and after cleanup, remove the pod from the API. In the
              presence of network partitions, this object may still exist after this
              timestamp, until an administrator or automated process can determine the
              resource is fully terminated. If not set, graceful deletion of the object
              has not been requested.
              
              Populated by the system when a graceful deletion is requested. Read-only.
              More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
              
              Time is a wrapper around time.Time which supports correct marshaling to
              YAML and JSON. Wrappers are provided for many of the factory methods that
              the time package offers.
              
            • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
              an identifier for the responsible component that will remove the entry from
              the list. If the deletionTimestamp of the object is non-nil, entries in
              this list can only be removed. Finalizers may be processed and removed in
              any order. Order is NOT enforced because it introduces significant risk of
              stuck finalizers. finalizers is a shared field, any actor with permission
              can reorder it. If the finalizer list is processed in order, then this can
              lead to a situation in which the component responsible for the first
              finalizer in the list is waiting for a signal (field value, external
              system, or other) produced by a component responsible for a finalizer later
              in the list, resulting in a deadlock. Without enforced ordering finalizers
              are free to order amongst themselves and are not vulnerable to ordering
              changes in the list.
              
            • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
              unique name ONLY IF the Name field has not been provided. If this field is
              used, the name returned to the client will be different than the name
              passed. This value will also be combined with a unique suffix. The provided
              value has the same validation rules as the Name field, and may be truncated
              by the length of the suffix required to make the value unique on the
              server.
              
              If this field is specified and the generated name exists, the server will
              NOT return a 409 - instead, it will either return 201 Created or 500 with
              Reason ServerTimeout indicating a unique name could not be found in the
              time allotted, and the client should retry (optionally after the time
              indicated in the Retry-After header).
              
              Applied only if Name is not specified. More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
              
            • generation (integer) A sequence number representing a specific generation of the desired state.
              Populated by the system. Read-only.
              
            • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
              (scope and select) objects. May match selectors of replication controllers
              and services. More info: http://kubernetes.io/docs/user-guide/labels
              
            • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
              managed by that workflow. This is mostly for internal housekeeping, and
              users typically shouldn't need to set or understand this field. A workflow
              can be the user's name, a controller's name, or the name of a specific
              apply path like "ci-cd". The set of fields is always in the version that
              the workflow used when modifying the object.
              
              ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
              the resource that the fieldset applies to.
              
              

              • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                to. The format is "group/version" just like the top-level APIVersion field.
                It is necessary to track the version of a field set because it cannot be
                automatically converted.
                
              • fieldsType (string) FieldsType is the discriminator for the different fields format and
                version. There is currently only one possible value: "FieldsV1"
                
              • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                type.
                
                FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                format.
                
                Each key is either a '.' representing the field itself, and will always map
                to an empty set, or a string representing a sub-field or item. The string
                will follow one of these four formats: 'f:(name)', where (name) is the name
                of a field in a struct, or key in a map 'v:(value)', where (value) is the
                exact json formatted value of a list item 'i:(index)', where (index) is
                position of a item in a list 'k:(keys)', where (keys) is a map of a list
                item's key fields to their unique values If a key maps to an empty Fields
                value, the field that key represents is part of the set.
                
                The exact format is defined in sigs.k8s.io/structured-merge-diff
                
                FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                format.
                
                Each key is either a '.' representing the field itself, and will always map
                to an empty set, or a string representing a sub-field or item. The string
                will follow one of these four formats: 'f:(name)', where (name) is the name
                of a field in a struct, or key in a map 'v:(value)', where (value) is the
                exact json formatted value of a list item 'i:(index)', where (index) is
                position of a item in a list 'k:(keys)', where (keys) is a map of a list
                item's key fields to their unique values If a key maps to an empty Fields
                value, the field that key represents is part of the set.
                
                The exact format is defined in sigs.k8s.io/structured-merge-diff
                
              • manager (string) Manager is an identifier of the workflow managing these fields.
                
              • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                being created. The only valid values for this field are 'Apply' and
                'Update'.
                
              • subresource (string) Subresource is the name of the subresource used to update that object, or
                empty string if the object was updated through the main resource. The value
                of this field is used to distinguish between managers, even if they share
                the same name. For example, a status update will be distinct from a regular
                update using the same manager name. Note that the APIVersion field is not
                related to the Subresource field and it always corresponds to the version
                of the main resource.
                
              • time (string) Time is timestamp of when these fields were set. It should always be empty
                if Operation is 'Apply'
                
                Time is a wrapper around time.Time which supports correct marshaling to
                YAML and JSON. Wrappers are provided for many of the factory methods that
                the time package offers.
                
            • name (string) Name must be unique within a namespace. Is required when creating
              resources, although some resources may allow a client to request the
              generation of an appropriate name automatically. Name is primarily intended
              for creation idempotence and configuration definition. Cannot be updated.
              More info: http://kubernetes.io/docs/user-guide/identifiers#names
              
            • namespace (string) Namespace defines the space within which each name must be unique. An empty
              namespace is equivalent to the "default" namespace, but "default" is the
              canonical representation. Not all objects are required to be scoped to a
              namespace - the value of this field for those objects will be empty.
              
              Must be a DNS_LABEL. Cannot be updated. More info:
              http://kubernetes.io/docs/user-guide/namespaces
              
            • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
              been deleted, this object will be garbage collected. If this object is
              managed by a controller, then an entry in this list will point to this
              controller, with the controller field set to true. There cannot be more
              than one managing controller.
              
              OwnerReference contains enough information to let you identify an owning
              object. An owning object must be in the same namespace as the dependent, or
              be cluster-scoped, so there is no namespace field.
              
              

              • apiVersion (string) API version of the referent.
                
              • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                owner cannot be deleted from the key-value store until this reference is
                removed. Defaults to false. To set this field, a user needs "delete"
                permission of the owner, otherwise 422 (Unprocessable Entity) will be
                returned.
                
              • controller (boolean) If true, this reference points to the managing controller.
                
              • kind (string) Kind of the referent. More info:
                https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                
              • name (string) Name of the referent. More info:
                http://kubernetes.io/docs/user-guide/identifiers#names
                
              • uid (string) UID of the referent. More info:
                http://kubernetes.io/docs/user-guide/identifiers#uids
                
            • resourceVersion (string) An opaque value that represents the internal version of this object that
              can be used by clients to determine when objects have changed. May be used
              for optimistic concurrency, change detection, and the watch operation on a
              resource or set of resources. Clients must treat these values as opaque and
              passed unmodified back to the server. They may only be valid for a
              particular resource or set of resources.
              
              Populated by the system. Read-only. Value must be treated as opaque by
              clients and . More info:
              https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
              
            • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
              Read-only.
              
              DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
              the field is planned to be removed in 1.21 release.
              
            • uid (string) UID is the unique in time and space value for this object. It is typically
              generated by the server on successful creation of a resource and is not
              allowed to change on PUT operations.
              
              Populated by the system. Read-only. More info:
              http://kubernetes.io/docs/user-guide/identifiers#uids
              
          • spec (Object) Specification of the desired behavior of the pod. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
            
            PodSpec is a description of a pod.
            
            

            • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
              StartTime before the system will actively try to mark it failed and kill
              associated containers. Value must be a positive integer.
              
            • affinity (Object) If specified, the pod's scheduling constraints
              
              Affinity is a group of affinity scheduling rules.
              
              

              • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
                
                Node affinity is a group of node affinity scheduling rules.
                
                

                • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
                  affinity expressions specified by this field, but it may choose a node that
                  violates one or more of the expressions. The node that is most preferred is
                  the one with the greatest sum of weights, i.e. for each node that meets all
                  of the scheduling requirements (resource request, requiredDuringScheduling
                  affinity expressions, etc.), compute a sum by iterating through the
                  elements of this field and adding "weight" to the sum if the node matches
                  the corresponding matchExpressions; the node(s) with the highest sum are
                  the most preferred.
                  
                  An empty preferred scheduling term matches all objects with implicit weight
                  0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
                  (i.e. is also a no-op).
                  
                  

                  • preference (Object) A node selector term, associated with the corresponding weight.
                    
                    A null or empty node selector term matches no objects. The requirements of
                    them are ANDed. The TopologySelectorTerm type implements a subset of the
                    NodeSelectorTerm.
                    
                    

                    • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                      
                      A node selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) The label key that the selector applies to.
                        
                      • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                        NotIn, Exists, DoesNotExist. Gt, and Lt.
                        
                        
                        
                      • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                        must be non-empty. If the operator is Exists or DoesNotExist, the values
                        array must be empty. If the operator is Gt or Lt, the values array must
                        have a single element, which will be interpreted as an integer. This array
                        is replaced during a strategic merge patch.
                        
                    • matchFields ([]Object) A list of node selector requirements by node's fields.
                      
                      A node selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) The label key that the selector applies to.
                        
                      • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                        NotIn, Exists, DoesNotExist. Gt, and Lt.
                        
                        
                        
                      • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                        must be non-empty. If the operator is Exists or DoesNotExist, the values
                        array must be empty. If the operator is Gt or Lt, the values array must
                        have a single element, which will be interpreted as an integer. This array
                        is replaced during a strategic merge patch.
                        
                  • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                    range 1-100.
                    
                • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
                  scheduling time, the pod will not be scheduled onto the node. If the
                  affinity requirements specified by this field cease to be met at some point
                  during pod execution (e.g. due to an update), the system may or may not try
                  to eventually evict the pod from its node.
                  
                  A node selector represents the union of the results of one or more label
                  queries over a set of nodes; that is, it represents the OR of the selectors
                  represented by the node selector terms.
                  
                  

                  • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                    
                    A null or empty node selector term matches no objects. The requirements of
                    them are ANDed. The TopologySelectorTerm type implements a subset of the
                    NodeSelectorTerm.
                    
                    

                    • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                      
                      A node selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) The label key that the selector applies to.
                        
                      • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                        NotIn, Exists, DoesNotExist. Gt, and Lt.
                        
                        
                        
                      • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                        must be non-empty. If the operator is Exists or DoesNotExist, the values
                        array must be empty. If the operator is Gt or Lt, the values array must
                        have a single element, which will be interpreted as an integer. This array
                        is replaced during a strategic merge patch.
                        
                    • matchFields ([]Object) A list of node selector requirements by node's fields.
                      
                      A node selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) The label key that the selector applies to.
                        
                      • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                        NotIn, Exists, DoesNotExist. Gt, and Lt.
                        
                        
                        
                      • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                        must be non-empty. If the operator is Exists or DoesNotExist, the values
                        array must be empty. If the operator is Gt or Lt, the values array must
                        have a single element, which will be interpreted as an integer. This array
                        is replaced during a strategic merge patch.
                        
              • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
                same node, zone, etc. as some other pod(s)).
                
                Pod affinity is a group of inter pod affinity scheduling rules.
                
                

                • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
                  affinity expressions specified by this field, but it may choose a node that
                  violates one or more of the expressions. The node that is most preferred is
                  the one with the greatest sum of weights, i.e. for each node that meets all
                  of the scheduling requirements (resource request, requiredDuringScheduling
                  affinity expressions, etc.), compute a sum by iterating through the
                  elements of this field and adding "weight" to the sum if the node has pods
                  which matches the corresponding podAffinityTerm; the node(s) with the
                  highest sum are the most preferred.
                  
                  The weights of all of the matched WeightedPodAffinityTerm fields are added
                  per-node to find the most preferred node(s)
                  
                  

                  • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                    
                    Defines a set of pods (namely those matching the labelSelector relative to
                    the given namespace(s)) that this pod should be co-located (affinity) or
                    not co-located (anti-affinity) with, where co-located is defined as running
                    on a node whose value of the label with key (topologyKey) matches that of
                    any node on which a pod of the set of pods is running
                    
                    

                    • labelSelector (Object) A label query over a set of resources, in this case pods.
                      
                      A label selector is a label query over a set of resources. The result of
                      matchLabels and matchExpressions are ANDed. An empty label selector matches
                      all objects. A null label selector matches no objects.
                      
                      

                      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                        are ANDed.
                        
                        A label selector requirement is a selector that contains values, a key, and
                        an operator that relates the key and values.
                        
                        

                        • key (string) key is the label key that the selector applies to.
                          
                        • operator (string) operator represents a key's relationship to a set of values. Valid
                          operators are In, NotIn, Exists and DoesNotExist.
                          
                        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                          values array must be non-empty. If the operator is Exists or DoesNotExist,
                          the values array must be empty. This array is replaced during a strategic
                          merge patch.
                          
                      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                        matchLabels map is equivalent to an element of matchExpressions, whose key
                        field is "key", the operator is "In", and the values array contains only
                        "value". The requirements are ANDed.
                        
                    • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                      is applied to the union of the namespaces selected by this field and the
                      ones listed in the namespaces field. null selector and null or empty
                      namespaces list means "this pod's namespace". An empty selector ({})
                      matches all namespaces. This field is beta-level and is only honored when
                      PodAffinityNamespaceSelector feature is enabled.
                      
                      A label selector is a label query over a set of resources. The result of
                      matchLabels and matchExpressions are ANDed. An empty label selector matches
                      all objects. A null label selector matches no objects.
                      
                      

                      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                        are ANDed.
                        
                        A label selector requirement is a selector that contains values, a key, and
                        an operator that relates the key and values.
                        
                        

                        • key (string) key is the label key that the selector applies to.
                          
                        • operator (string) operator represents a key's relationship to a set of values. Valid
                          operators are In, NotIn, Exists and DoesNotExist.
                          
                        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                          values array must be non-empty. If the operator is Exists or DoesNotExist,
                          the values array must be empty. This array is replaced during a strategic
                          merge patch.
                          
                      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                        matchLabels map is equivalent to an element of matchExpressions, whose key
                        field is "key", the operator is "In", and the values array contains only
                        "value". The requirements are ANDed.
                        
                    • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                      to. The term is applied to the union of the namespaces listed in this field
                      and the ones selected by namespaceSelector. null or empty namespaces list
                      and null namespaceSelector means "this pod's namespace"
                      
                    • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                      with the pods matching the labelSelector in the specified namespaces, where
                      co-located is defined as running on a node whose value of the label with
                      key topologyKey matches that of any node on which any of the selected pods
                      is running. Empty topologyKey is not allowed.
                      
                  • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                    range 1-100.
                    
                • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
                  scheduling time, the pod will not be scheduled onto the node. If the
                  affinity requirements specified by this field cease to be met at some point
                  during pod execution (e.g. due to a pod label update), the system may or
                  may not try to eventually evict the pod from its node. When there are
                  multiple elements, the lists of nodes corresponding to each podAffinityTerm
                  are intersected, i.e. all terms must be satisfied.
                  
                  Defines a set of pods (namely those matching the labelSelector relative to
                  the given namespace(s)) that this pod should be co-located (affinity) or
                  not co-located (anti-affinity) with, where co-located is defined as running
                  on a node whose value of the label with key (topologyKey) matches that of
                  any node on which a pod of the set of pods is running
                  
                  

                  • labelSelector (Object) A label query over a set of resources, in this case pods.
                    
                    A label selector is a label query over a set of resources. The result of
                    matchLabels and matchExpressions are ANDed. An empty label selector matches
                    all objects. A null label selector matches no objects.
                    
                    

                    • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                      are ANDed.
                      
                      A label selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) key is the label key that the selector applies to.
                        
                      • operator (string) operator represents a key's relationship to a set of values. Valid
                        operators are In, NotIn, Exists and DoesNotExist.
                        
                      • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                        values array must be non-empty. If the operator is Exists or DoesNotExist,
                        the values array must be empty. This array is replaced during a strategic
                        merge patch.
                        
                    • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                      matchLabels map is equivalent to an element of matchExpressions, whose key
                      field is "key", the operator is "In", and the values array contains only
                      "value". The requirements are ANDed.
                      
                  • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                    is applied to the union of the namespaces selected by this field and the
                    ones listed in the namespaces field. null selector and null or empty
                    namespaces list means "this pod's namespace". An empty selector ({})
                    matches all namespaces. This field is beta-level and is only honored when
                    PodAffinityNamespaceSelector feature is enabled.
                    
                    A label selector is a label query over a set of resources. The result of
                    matchLabels and matchExpressions are ANDed. An empty label selector matches
                    all objects. A null label selector matches no objects.
                    
                    

                    • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                      are ANDed.
                      
                      A label selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) key is the label key that the selector applies to.
                        
                      • operator (string) operator represents a key's relationship to a set of values. Valid
                        operators are In, NotIn, Exists and DoesNotExist.
                        
                      • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                        values array must be non-empty. If the operator is Exists or DoesNotExist,
                        the values array must be empty. This array is replaced during a strategic
                        merge patch.
                        
                    • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                      matchLabels map is equivalent to an element of matchExpressions, whose key
                      field is "key", the operator is "In", and the values array contains only
                      "value". The requirements are ANDed.
                      
                  • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                    to. The term is applied to the union of the namespaces listed in this field
                    and the ones selected by namespaceSelector. null or empty namespaces list
                    and null namespaceSelector means "this pod's namespace"
                    
                  • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                    with the pods matching the labelSelector in the specified namespaces, where
                    co-located is defined as running on a node whose value of the label with
                    key topologyKey matches that of any node on which any of the selected pods
                    is running. Empty topologyKey is not allowed.
                    
              • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
                in the same node, zone, etc. as some other pod(s)).
                
                Pod anti affinity is a group of inter pod anti affinity scheduling rules.
                
                

                • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
                  anti-affinity expressions specified by this field, but it may choose a node
                  that violates one or more of the expressions. The node that is most
                  preferred is the one with the greatest sum of weights, i.e. for each node
                  that meets all of the scheduling requirements (resource request,
                  requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
                  iterating through the elements of this field and adding "weight" to the sum
                  if the node has pods which matches the corresponding podAffinityTerm; the
                  node(s) with the highest sum are the most preferred.
                  
                  The weights of all of the matched WeightedPodAffinityTerm fields are added
                  per-node to find the most preferred node(s)
                  
                  

                  • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                    
                    Defines a set of pods (namely those matching the labelSelector relative to
                    the given namespace(s)) that this pod should be co-located (affinity) or
                    not co-located (anti-affinity) with, where co-located is defined as running
                    on a node whose value of the label with key (topologyKey) matches that of
                    any node on which a pod of the set of pods is running
                    
                    

                    • labelSelector (Object) A label query over a set of resources, in this case pods.
                      
                      A label selector is a label query over a set of resources. The result of
                      matchLabels and matchExpressions are ANDed. An empty label selector matches
                      all objects. A null label selector matches no objects.
                      
                      

                      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                        are ANDed.
                        
                        A label selector requirement is a selector that contains values, a key, and
                        an operator that relates the key and values.
                        
                        

                        • key (string) key is the label key that the selector applies to.
                          
                        • operator (string) operator represents a key's relationship to a set of values. Valid
                          operators are In, NotIn, Exists and DoesNotExist.
                          
                        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                          values array must be non-empty. If the operator is Exists or DoesNotExist,
                          the values array must be empty. This array is replaced during a strategic
                          merge patch.
                          
                      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                        matchLabels map is equivalent to an element of matchExpressions, whose key
                        field is "key", the operator is "In", and the values array contains only
                        "value". The requirements are ANDed.
                        
                    • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                      is applied to the union of the namespaces selected by this field and the
                      ones listed in the namespaces field. null selector and null or empty
                      namespaces list means "this pod's namespace". An empty selector ({})
                      matches all namespaces. This field is beta-level and is only honored when
                      PodAffinityNamespaceSelector feature is enabled.
                      
                      A label selector is a label query over a set of resources. The result of
                      matchLabels and matchExpressions are ANDed. An empty label selector matches
                      all objects. A null label selector matches no objects.
                      
                      

                      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                        are ANDed.
                        
                        A label selector requirement is a selector that contains values, a key, and
                        an operator that relates the key and values.
                        
                        

                        • key (string) key is the label key that the selector applies to.
                          
                        • operator (string) operator represents a key's relationship to a set of values. Valid
                          operators are In, NotIn, Exists and DoesNotExist.
                          
                        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                          values array must be non-empty. If the operator is Exists or DoesNotExist,
                          the values array must be empty. This array is replaced during a strategic
                          merge patch.
                          
                      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                        matchLabels map is equivalent to an element of matchExpressions, whose key
                        field is "key", the operator is "In", and the values array contains only
                        "value". The requirements are ANDed.
                        
                    • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                      to. The term is applied to the union of the namespaces listed in this field
                      and the ones selected by namespaceSelector. null or empty namespaces list
                      and null namespaceSelector means "this pod's namespace"
                      
                    • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                      with the pods matching the labelSelector in the specified namespaces, where
                      co-located is defined as running on a node whose value of the label with
                      key topologyKey matches that of any node on which any of the selected pods
                      is running. Empty topologyKey is not allowed.
                      
                  • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                    range 1-100.
                    
                • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
                  scheduling time, the pod will not be scheduled onto the node. If the
                  anti-affinity requirements specified by this field cease to be met at some
                  point during pod execution (e.g. due to a pod label update), the system may
                  or may not try to eventually evict the pod from its node. When there are
                  multiple elements, the lists of nodes corresponding to each podAffinityTerm
                  are intersected, i.e. all terms must be satisfied.
                  
                  Defines a set of pods (namely those matching the labelSelector relative to
                  the given namespace(s)) that this pod should be co-located (affinity) or
                  not co-located (anti-affinity) with, where co-located is defined as running
                  on a node whose value of the label with key (topologyKey) matches that of
                  any node on which a pod of the set of pods is running
                  
                  

                  • labelSelector (Object) A label query over a set of resources, in this case pods.
                    
                    A label selector is a label query over a set of resources. The result of
                    matchLabels and matchExpressions are ANDed. An empty label selector matches
                    all objects. A null label selector matches no objects.
                    
                    

                    • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                      are ANDed.
                      
                      A label selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) key is the label key that the selector applies to.
                        
                      • operator (string) operator represents a key's relationship to a set of values. Valid
                        operators are In, NotIn, Exists and DoesNotExist.
                        
                      • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                        values array must be non-empty. If the operator is Exists or DoesNotExist,
                        the values array must be empty. This array is replaced during a strategic
                        merge patch.
                        
                    • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                      matchLabels map is equivalent to an element of matchExpressions, whose key
                      field is "key", the operator is "In", and the values array contains only
                      "value". The requirements are ANDed.
                      
                  • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                    is applied to the union of the namespaces selected by this field and the
                    ones listed in the namespaces field. null selector and null or empty
                    namespaces list means "this pod's namespace". An empty selector ({})
                    matches all namespaces. This field is beta-level and is only honored when
                    PodAffinityNamespaceSelector feature is enabled.
                    
                    A label selector is a label query over a set of resources. The result of
                    matchLabels and matchExpressions are ANDed. An empty label selector matches
                    all objects. A null label selector matches no objects.
                    
                    

                    • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                      are ANDed.
                      
                      A label selector requirement is a selector that contains values, a key, and
                      an operator that relates the key and values.
                      
                      

                      • key (string) key is the label key that the selector applies to.
                        
                      • operator (string) operator represents a key's relationship to a set of values. Valid
                        operators are In, NotIn, Exists and DoesNotExist.
                        
                      • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                        values array must be non-empty. If the operator is Exists or DoesNotExist,
                        the values array must be empty. This array is replaced during a strategic
                        merge patch.
                        
                    • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                      matchLabels map is equivalent to an element of matchExpressions, whose key
                      field is "key", the operator is "In", and the values array contains only
                      "value". The requirements are ANDed.
                      
                  • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                    to. The term is applied to the union of the namespaces listed in this field
                    and the ones selected by namespaceSelector. null or empty namespaces list
                    and null namespaceSelector means "this pod's namespace"
                    
                  • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                    with the pods matching the labelSelector in the specified namespaces, where
                    co-located is defined as running on a node whose value of the label with
                    key topologyKey matches that of any node on which any of the selected pods
                    is running. Empty topologyKey is not allowed.
                    
            • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
              should be automatically mounted.
              
            • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
              added or removed. There must be at least one container in a Pod. Cannot be
              updated.
              
              A single application container that you want to run within a pod.
              
              

              • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
                provided. Variable references $(VAR_NAME) are expanded using the
                container's environment. If a variable cannot be resolved, the reference in
                the input string will be unchanged. Double $$ are reduced to a single $,
                which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                produce the string literal "$(VAR_NAME)". Escaped references will never be
                expanded, regardless of whether the variable exists or not. Cannot be
                updated. More info:
                https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                
              • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
                ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
                are expanded using the container's environment. If a variable cannot be
                resolved, the reference in the input string will be unchanged. Double $$
                are reduced to a single $, which allows for escaping the $(VAR_NAME)
                syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                Escaped references will never be expanded, regardless of whether the
                variable exists or not. Cannot be updated. More info:
                https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                
              • env ([]Object) List of environment variables to set in the container. Cannot be updated.
                
                EnvVar represents an environment variable present in a Container.
                
                

                • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
                  
                • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
                  environment variables in the container and any service environment
                  variables. If a variable cannot be resolved, the reference in the input
                  string will be unchanged. Double $$ are reduced to a single $, which allows
                  for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
                  string literal "$(VAR_NAME)". Escaped references will never be expanded,
                  regardless of whether the variable exists or not. Defaults to "".
                  
                • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
                  empty.
                  
                  EnvVarSource represents a source for the value of an EnvVar.
                  
                  

                  • configMapKeyRef (Object) Selects a key of a ConfigMap.
                    
                    Selects a key from a ConfigMap.
                    
                    

                    • key (string) The key to select.
                      
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the ConfigMap or its key must be defined
                      
                  • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                    `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                    spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                    requests.memory and requests.ephemeral-storage) are currently supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
                  • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                    
                    SecretKeySelector selects a key of a Secret.
                    
                    

                    • key (string) The key of the secret to select from. Must be a valid secret key.
                      
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the Secret or its key must be defined
                      
              • envFrom ([]Object) List of sources to populate environment variables in the container. The
                keys defined within a source must be a C_IDENTIFIER. All invalid keys will
                be reported as an event when the container is starting. When a key exists
                in multiple sources, the value associated with the last source will take
                precedence. Values defined by an Env with a duplicate key will take
                precedence. Cannot be updated.
                
                EnvFromSource represents the source of a set of ConfigMaps
                
                

                • configMapRef (Object) The ConfigMap to select from
                  
                  ConfigMapEnvSource selects a ConfigMap to populate the environment
                  variables with.
                  
                  The contents of the target ConfigMap's Data field will represent the
                  key-value pairs as environment variables.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                  • optional (boolean) Specify whether the ConfigMap must be defined
                    
                • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
                  C_IDENTIFIER.
                  
                • secretRef (Object) The Secret to select from
                  
                  SecretEnvSource selects a Secret to populate the environment variables
                  with.
                  
                  The contents of the target Secret's Data field will represent the key-value
                  pairs as environment variables.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                  • optional (boolean) Specify whether the Secret must be defined
                    
              • image (string) Docker image name. More info:
                https://kubernetes.io/docs/concepts/containers/images This field is
                optional to allow higher level config management to default or override
                container images in workload controllers like Deployments and StatefulSets.
                
              • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
                if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
                More info:
                https://kubernetes.io/docs/concepts/containers/images#updating-images
                
                
                
              • lifecycle (Object) Actions that the management system should take in response to container
                lifecycle events. Cannot be updated.
                
                Lifecycle describes actions that the management system should take in
                response to container lifecycle events. For the PostStart and PreStop
                lifecycle handlers, management of the container blocks until the action is
                complete, unless the container process fails, in which case the handler is
                aborted.
                
                

                • postStart (Object) PostStart is called immediately after a container is created. If the
                  handler fails, the container is terminated and restarted according to its
                  restart policy. Other management of the container blocks until the hook
                  completes. More info:
                  https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                  
                  LifecycleHandler defines a specific action that should be taken in a
                  lifecycle hook. One and only one of the fields, except TCPSocket must be
                  specified.
                  
                  

                  • exec (Object) Exec specifies the action to take.
                    
                    ExecAction describes a "run in container" action.
                    
                    

                    • command ([]string) Command is the command line to execute inside the container, the working
                      directory for the command is root ('/') in the container's filesystem. The
                      command is simply exec'd, it is not run inside a shell, so traditional
                      shell instructions ('|', etc) won't work. To use a shell, you need to
                      explicitly call out to that shell. Exit status of 0 is treated as
                      live/healthy and non-zero is unhealthy.
                      
                  • httpGet (Object) HTTPGet specifies the http request to perform.
                    
                    HTTPGetAction describes an action based on HTTP Get requests.
                    
                    

                    • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                      "Host" in httpHeaders instead.
                      
                    • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                      
                      HTTPHeader describes a custom header to be used in HTTP probes
                      
                      

                      • name (string) The header field name
                        
                      • value (string) The header field value
                        
                    • path (string) Path to access on the HTTP server.
                      
                    • port (string) Name or number of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                    • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                      
                      
                  • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                    the backward compatibility. There are no validation of this field and
                    lifecycle hooks will fail in runtime when tcp handler is specified.
                    
                    TCPSocketAction describes an action based on opening a socket
                    
                    

                    • host (string) Optional: Host name to connect to, defaults to the pod IP.
                      
                    • port (string) Number or name of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                • preStop (Object) PreStop is called immediately before a container is terminated due to an
                  API request or management event such as liveness/startup probe failure,
                  preemption, resource contention, etc. The handler is not called if the
                  container crashes or exits. The Pod's termination grace period countdown
                  begins before the PreStop hook is executed. Regardless of the outcome of
                  the handler, the container will eventually terminate within the Pod's
                  termination grace period (unless delayed by finalizers). Other management
                  of the container blocks until the hook completes or until the termination
                  grace period is reached. More info:
                  https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                  
                  LifecycleHandler defines a specific action that should be taken in a
                  lifecycle hook. One and only one of the fields, except TCPSocket must be
                  specified.
                  
                  

                  • exec (Object) Exec specifies the action to take.
                    
                    ExecAction describes a "run in container" action.
                    
                    

                    • command ([]string) Command is the command line to execute inside the container, the working
                      directory for the command is root ('/') in the container's filesystem. The
                      command is simply exec'd, it is not run inside a shell, so traditional
                      shell instructions ('|', etc) won't work. To use a shell, you need to
                      explicitly call out to that shell. Exit status of 0 is treated as
                      live/healthy and non-zero is unhealthy.
                      
                  • httpGet (Object) HTTPGet specifies the http request to perform.
                    
                    HTTPGetAction describes an action based on HTTP Get requests.
                    
                    

                    • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                      "Host" in httpHeaders instead.
                      
                    • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                      
                      HTTPHeader describes a custom header to be used in HTTP probes
                      
                      

                      • name (string) The header field name
                        
                      • value (string) The header field value
                        
                    • path (string) Path to access on the HTTP server.
                      
                    • port (string) Name or number of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                    • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                      
                      
                  • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                    the backward compatibility. There are no validation of this field and
                    lifecycle hooks will fail in runtime when tcp handler is specified.
                    
                    TCPSocketAction describes an action based on opening a socket
                    
                    

                    • host (string) Optional: Host name to connect to, defaults to the pod IP.
                      
                    • port (string) Number or name of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
              • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
                probe fails. Cannot be updated. More info:
                https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
                must have a unique name (DNS_LABEL). Cannot be updated.
                
              • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
                system additional information about the network connections a container
                uses, but is primarily informational. Not specifying a port here DOES NOT
                prevent that port from being exposed. Any port which is listening on the
                default "0.0.0.0" address inside a container will be accessible from the
                network. Cannot be updated.
                
                ContainerPort represents a network port in a single container.
                
                

                • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
                  number, 0 ( x ( 65536.
                  
                • hostIP (string) What host IP to bind the external port to.
                  
                • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
                  port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
                  ContainerPort. Most containers do not need this.
                  
                • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                  named port in a pod must have a unique name. Name for the port that can be
                  referred to by services.
                  
                • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
                  
                  
              • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
                from service endpoints if the probe fails. Cannot be updated. More info:
                https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
                https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                
                ResourceRequirements describes the compute resource requirements.
                
                

                • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                  Requests is omitted for a container, it defaults to Limits if that is
                  explicitly specified, otherwise to an implementation-defined value. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
              • securityContext (Object) SecurityContext defines the security options the container should be run
                with. If set, the fields of SecurityContext override the equivalent fields
                of PodSecurityContext. More info:
                https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
                
                SecurityContext holds security configuration that will be applied to a
                container. Some fields are present in both SecurityContext and
                PodSecurityContext. When both are set, the values in SecurityContext take
                precedence.
                
                

                • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
                  privileges than its parent process. This bool directly controls if the
                  no_new_privs flag will be set on the container process.
                  AllowPrivilegeEscalation is true always when the container is: 1) run as
                  Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
                  spec.os.name is windows.
                  
                • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
                  default set of capabilities granted by the container runtime. Note that
                  this field cannot be set when spec.os.name is windows.
                  
                  Adds and removes POSIX capabilities from running containers.
                  
                  

                  • add ([]string) Added capabilities
                    
                  • drop ([]string) Removed capabilities
                    
                • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
                  essentially equivalent to root on the host. Defaults to false. Note that
                  this field cannot be set when spec.os.name is windows.
                  
                • procMount (string) procMount denotes the type of proc mount to use for the containers. The
                  default is DefaultProcMount which uses the container runtime defaults for
                  readonly paths and masked paths. This requires the ProcMountType feature
                  flag to be enabled. Note that this field cannot be set when spec.os.name is
                  windows.
                  
                • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
                  Note that this field cannot be set when spec.os.name is windows.
                  
                • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
                  default if unset. May also be set in PodSecurityContext. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is windows.
                  
                • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
                  Kubelet will validate the image at runtime to ensure that it does not run
                  as UID 0 (root) and fail to start the container if it does. If unset or
                  false, no such validation will be performed. May also be set in
                  PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
                  the value specified in SecurityContext takes precedence.
                  
                • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
                  specified in image metadata if unspecified. May also be set in
                  PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
                  the value specified in SecurityContext takes precedence. Note that this
                  field cannot be set when spec.os.name is windows.
                  
                • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
                  container runtime will allocate a random SELinux context for each
                  container. May also be set in PodSecurityContext. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is windows.
                  
                  SELinuxOptions are the labels to be applied to the container
                  
                  

                  • level (string) Level is SELinux level label that applies to the container.
                    
                  • role (string) Role is a SELinux role label that applies to the container.
                    
                  • type (string) Type is a SELinux type label that applies to the container.
                    
                  • user (string) User is a SELinux user label that applies to the container.
                    
                • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
                  provided at both the pod & container level, the container options override
                  the pod options. Note that this field cannot be set when spec.os.name is
                  windows.
                  
                  SeccompProfile defines a pod/container's seccomp profile settings. Only one
                  profile source may be set.
                  
                  

                  • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                    be used. The profile must be preconfigured on the node to work. Must be a
                    descending path, relative to the kubelet's configured seccomp profile
                    location. Must only be set if type is "Localhost".
                    
                  • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                    are:
                    
                    Localhost - a profile defined in a file on the node should be used.
                    RuntimeDefault - the container runtime default profile should be used.
                    Unconfined - no profile should be applied.
                    
                    
                    
                • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
                  the options from the PodSecurityContext will be used. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is linux.
                  
                  WindowsSecurityContextOptions contain Windows-specific options and
                  credentials.
                  
                  

                  • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                    (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                    the GMSA credential spec named by the GMSACredentialSpecName field.
                    
                  • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                    
                  • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                    container. This field is alpha-level and will only be honored by components
                    that enable the WindowsHostProcessContainers feature flag. Setting this
                    field without the feature flag will result in errors when validating the
                    Pod. All of a Pod's containers must have the same effective HostProcess
                    value (it is not allowed to have a mix of HostProcess containers and
                    non-HostProcess containers). In addition, if HostProcess is true then
                    HostNetwork must also be set to true.
                    
                  • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                    Defaults to the user specified in image metadata if unspecified. May also
                    be set in PodSecurityContext. If set in both SecurityContext and
                    PodSecurityContext, the value specified in SecurityContext takes
                    precedence.
                    
              • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
                specified, no other probes are executed until this completes successfully.
                If this probe fails, the Pod will be restarted, just as if the
                livenessProbe failed. This can be used to provide different probe
                parameters at the beginning of a Pod's lifecycle, when it might take a long
                time to load data or warm a cache, than during steady-state operation. This
                cannot be updated. More info:
                https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
                runtime. If this is not set, reads from stdin in the container will always
                result in EOF. Default is false.
                
              • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
                been opened by a single attach. When stdin is true the stdin stream will
                remain open across multiple attach sessions. If stdinOnce is set to true,
                stdin is opened on container start, is empty until the first client
                attaches to stdin, and then remains open and accepts data until the client
                disconnects, at which time stdin is closed and remains closed until the
                container is restarted. If this flag is false, a container processes that
                reads from stdin will never receive an EOF. Default is false
                
              • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
                message will be written is mounted into the container's filesystem. Message
                written is intended to be brief final status, such as an assertion failure
                message. Will be truncated by the node if greater than 4096 bytes. The
                total message length across all containers will be limited to 12kb.
                Defaults to /dev/termination-log. Cannot be updated.
                
              • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
                contents of terminationMessagePath to populate the container status message
                on both success and failure. FallbackToLogsOnError will use the last chunk
                of container log output if the termination message file is empty and the
                container exited with an error. The log output is limited to 2048 bytes or
                80 lines, whichever is smaller. Defaults to File. Cannot be updated.
                
                
                
              • tty (boolean) Whether this container should allocate a TTY for itself, also requires
                'stdin' to be true. Default is false.
                
              • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
                
                volumeDevice describes a mapping of a raw block device within a container.
                
                

                • devicePath (string) devicePath is the path inside of the container that the device will be
                  mapped to.
                  
                • name (string) name must match the name of a persistentVolumeClaim in the pod
                  
              • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
                
                VolumeMount describes a mounting of a Volume within a container.
                
                

                • mountPath (string) Path within the container at which the volume should be mounted. Must not
                  contain ':'.
                  
                • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
                  container and the other way around. When not set, MountPropagationNone is
                  used. This field is beta in 1.10.
                  
                • name (string) This must match the Name of a Volume.
                  
                • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
                  Defaults to false.
                  
                • subPath (string) Path within the volume from which the container's volume should be mounted.
                  Defaults to "" (volume's root).
                  
                • subPathExpr (string) Expanded path within the volume from which the container's volume should be
                  mounted. Behaves similarly to SubPath but environment variable references
                  $(VAR_NAME) are expanded using the container's environment. Defaults to ""
                  (volume's root). SubPathExpr and SubPath are mutually exclusive.
                  
              • workingDir (string) Container's working directory. If not specified, the container runtime's
                default will be used, which might be configured in the container image.
                Cannot be updated.
                
            • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
              merged to the generated DNS configuration based on DNSPolicy.
              
              PodDNSConfig defines the DNS parameters of a pod in addition to those
              generated from DNSPolicy.
              
              

              • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
                nameservers generated from DNSPolicy. Duplicated nameservers will be
                removed.
                
              • options ([]Object) A list of DNS resolver options. This will be merged with the base options
                generated from DNSPolicy. Duplicated entries will be removed. Resolution
                options given in Options will override those that appear in the base
                DNSPolicy.
                
                PodDNSConfigOption defines DNS resolver options of a pod.
                
                

                • name (string) Required.
                  
                • value (string) (empty)
                  
              • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
                the base search paths generated from DNSPolicy. Duplicated search paths
                will be removed.
                
            • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
              'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
              parameters given in DNSConfig will be merged with the policy selected with
              DNSPolicy. To have DNS options set along with hostNetwork, you have to
              specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
              
              
              
            • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
              injected into pod's environment variables, matching the syntax of Docker
              links. Optional: Defaults to true.
              
            • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
              run in an existing pod to perform user-initiated actions such as debugging.
              This list cannot be specified when creating a pod, and it cannot be
              modified by updating the pod spec. In order to add an ephemeral container
              to an existing pod, use the pod's ephemeralcontainers subresource. This
              field is beta-level and available on clusters that haven't disabled the
              EphemeralContainers feature gate.
              
              An EphemeralContainer is a temporary container that you may add to an
              existing Pod for user-initiated activities such as debugging. Ephemeral
              containers have no resource or scheduling guarantees, and they will not be
              restarted when they exit or when a Pod is removed or restarted. The kubelet
              may evict a Pod if an ephemeral container causes the Pod to exceed its
              resource allocation.
              
              To add an ephemeral container, use the ephemeralcontainers subresource of
              an existing Pod. Ephemeral containers may not be removed or restarted.
              
              This is a beta feature available on clusters that haven't disabled the
              EphemeralContainers feature gate.
              
              

              • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
                provided. Variable references $(VAR_NAME) are expanded using the
                container's environment. If a variable cannot be resolved, the reference in
                the input string will be unchanged. Double $$ are reduced to a single $,
                which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                produce the string literal "$(VAR_NAME)". Escaped references will never be
                expanded, regardless of whether the variable exists or not. Cannot be
                updated. More info:
                https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                
              • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
                ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
                are expanded using the container's environment. If a variable cannot be
                resolved, the reference in the input string will be unchanged. Double $$
                are reduced to a single $, which allows for escaping the $(VAR_NAME)
                syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                Escaped references will never be expanded, regardless of whether the
                variable exists or not. Cannot be updated. More info:
                https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                
              • env ([]Object) List of environment variables to set in the container. Cannot be updated.
                
                EnvVar represents an environment variable present in a Container.
                
                

                • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
                  
                • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
                  environment variables in the container and any service environment
                  variables. If a variable cannot be resolved, the reference in the input
                  string will be unchanged. Double $$ are reduced to a single $, which allows
                  for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
                  string literal "$(VAR_NAME)". Escaped references will never be expanded,
                  regardless of whether the variable exists or not. Defaults to "".
                  
                • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
                  empty.
                  
                  EnvVarSource represents a source for the value of an EnvVar.
                  
                  

                  • configMapKeyRef (Object) Selects a key of a ConfigMap.
                    
                    Selects a key from a ConfigMap.
                    
                    

                    • key (string) The key to select.
                      
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the ConfigMap or its key must be defined
                      
                  • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                    `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                    spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                    requests.memory and requests.ephemeral-storage) are currently supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
                  • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                    
                    SecretKeySelector selects a key of a Secret.
                    
                    

                    • key (string) The key of the secret to select from. Must be a valid secret key.
                      
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the Secret or its key must be defined
                      
              • envFrom ([]Object) List of sources to populate environment variables in the container. The
                keys defined within a source must be a C_IDENTIFIER. All invalid keys will
                be reported as an event when the container is starting. When a key exists
                in multiple sources, the value associated with the last source will take
                precedence. Values defined by an Env with a duplicate key will take
                precedence. Cannot be updated.
                
                EnvFromSource represents the source of a set of ConfigMaps
                
                

                • configMapRef (Object) The ConfigMap to select from
                  
                  ConfigMapEnvSource selects a ConfigMap to populate the environment
                  variables with.
                  
                  The contents of the target ConfigMap's Data field will represent the
                  key-value pairs as environment variables.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                  • optional (boolean) Specify whether the ConfigMap must be defined
                    
                • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
                  C_IDENTIFIER.
                  
                • secretRef (Object) The Secret to select from
                  
                  SecretEnvSource selects a Secret to populate the environment variables
                  with.
                  
                  The contents of the target Secret's Data field will represent the key-value
                  pairs as environment variables.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                  • optional (boolean) Specify whether the Secret must be defined
                    
              • image (string) Docker image name. More info:
                https://kubernetes.io/docs/concepts/containers/images
                
              • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
                if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
                More info:
                https://kubernetes.io/docs/concepts/containers/images#updating-images
                
                
                
              • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
                
                Lifecycle describes actions that the management system should take in
                response to container lifecycle events. For the PostStart and PreStop
                lifecycle handlers, management of the container blocks until the action is
                complete, unless the container process fails, in which case the handler is
                aborted.
                
                

                • postStart (Object) PostStart is called immediately after a container is created. If the
                  handler fails, the container is terminated and restarted according to its
                  restart policy. Other management of the container blocks until the hook
                  completes. More info:
                  https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                  
                  LifecycleHandler defines a specific action that should be taken in a
                  lifecycle hook. One and only one of the fields, except TCPSocket must be
                  specified.
                  
                  

                  • exec (Object) Exec specifies the action to take.
                    
                    ExecAction describes a "run in container" action.
                    
                    

                    • command ([]string) Command is the command line to execute inside the container, the working
                      directory for the command is root ('/') in the container's filesystem. The
                      command is simply exec'd, it is not run inside a shell, so traditional
                      shell instructions ('|', etc) won't work. To use a shell, you need to
                      explicitly call out to that shell. Exit status of 0 is treated as
                      live/healthy and non-zero is unhealthy.
                      
                  • httpGet (Object) HTTPGet specifies the http request to perform.
                    
                    HTTPGetAction describes an action based on HTTP Get requests.
                    
                    

                    • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                      "Host" in httpHeaders instead.
                      
                    • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                      
                      HTTPHeader describes a custom header to be used in HTTP probes
                      
                      

                      • name (string) The header field name
                        
                      • value (string) The header field value
                        
                    • path (string) Path to access on the HTTP server.
                      
                    • port (string) Name or number of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                    • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                      
                      
                  • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                    the backward compatibility. There are no validation of this field and
                    lifecycle hooks will fail in runtime when tcp handler is specified.
                    
                    TCPSocketAction describes an action based on opening a socket
                    
                    

                    • host (string) Optional: Host name to connect to, defaults to the pod IP.
                      
                    • port (string) Number or name of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                • preStop (Object) PreStop is called immediately before a container is terminated due to an
                  API request or management event such as liveness/startup probe failure,
                  preemption, resource contention, etc. The handler is not called if the
                  container crashes or exits. The Pod's termination grace period countdown
                  begins before the PreStop hook is executed. Regardless of the outcome of
                  the handler, the container will eventually terminate within the Pod's
                  termination grace period (unless delayed by finalizers). Other management
                  of the container blocks until the hook completes or until the termination
                  grace period is reached. More info:
                  https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                  
                  LifecycleHandler defines a specific action that should be taken in a
                  lifecycle hook. One and only one of the fields, except TCPSocket must be
                  specified.
                  
                  

                  • exec (Object) Exec specifies the action to take.
                    
                    ExecAction describes a "run in container" action.
                    
                    

                    • command ([]string) Command is the command line to execute inside the container, the working
                      directory for the command is root ('/') in the container's filesystem. The
                      command is simply exec'd, it is not run inside a shell, so traditional
                      shell instructions ('|', etc) won't work. To use a shell, you need to
                      explicitly call out to that shell. Exit status of 0 is treated as
                      live/healthy and non-zero is unhealthy.
                      
                  • httpGet (Object) HTTPGet specifies the http request to perform.
                    
                    HTTPGetAction describes an action based on HTTP Get requests.
                    
                    

                    • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                      "Host" in httpHeaders instead.
                      
                    • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                      
                      HTTPHeader describes a custom header to be used in HTTP probes
                      
                      

                      • name (string) The header field name
                        
                      • value (string) The header field value
                        
                    • path (string) Path to access on the HTTP server.
                      
                    • port (string) Name or number of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                    • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                      
                      
                  • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                    the backward compatibility. There are no validation of this field and
                    lifecycle hooks will fail in runtime when tcp handler is specified.
                    
                    TCPSocketAction describes an action based on opening a socket
                    
                    

                    • host (string) Optional: Host name to connect to, defaults to the pod IP.
                      
                    • port (string) Number or name of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
              • livenessProbe (Object) Probes are not allowed for ephemeral containers.
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
                unique among all containers, init containers and ephemeral containers.
                
              • ports ([]Object) Ports are not allowed for ephemeral containers.
                
                ContainerPort represents a network port in a single container.
                
                

                • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
                  number, 0 ( x ( 65536.
                  
                • hostIP (string) What host IP to bind the external port to.
                  
                • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
                  port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
                  ContainerPort. Most containers do not need this.
                  
                • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                  named port in a pod must have a unique name. Name for the port that can be
                  referred to by services.
                  
                • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
                  
                  
              • readinessProbe (Object) Probes are not allowed for ephemeral containers.
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
                use spare resources already allocated to the pod.
                
                ResourceRequirements describes the compute resource requirements.
                
                

                • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                  Requests is omitted for a container, it defaults to Limits if that is
                  explicitly specified, otherwise to an implementation-defined value. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
              • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
                container should be run with. If set, the fields of SecurityContext
                override the equivalent fields of PodSecurityContext.
                
                SecurityContext holds security configuration that will be applied to a
                container. Some fields are present in both SecurityContext and
                PodSecurityContext. When both are set, the values in SecurityContext take
                precedence.
                
                

                • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
                  privileges than its parent process. This bool directly controls if the
                  no_new_privs flag will be set on the container process.
                  AllowPrivilegeEscalation is true always when the container is: 1) run as
                  Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
                  spec.os.name is windows.
                  
                • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
                  default set of capabilities granted by the container runtime. Note that
                  this field cannot be set when spec.os.name is windows.
                  
                  Adds and removes POSIX capabilities from running containers.
                  
                  

                  • add ([]string) Added capabilities
                    
                  • drop ([]string) Removed capabilities
                    
                • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
                  essentially equivalent to root on the host. Defaults to false. Note that
                  this field cannot be set when spec.os.name is windows.
                  
                • procMount (string) procMount denotes the type of proc mount to use for the containers. The
                  default is DefaultProcMount which uses the container runtime defaults for
                  readonly paths and masked paths. This requires the ProcMountType feature
                  flag to be enabled. Note that this field cannot be set when spec.os.name is
                  windows.
                  
                • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
                  Note that this field cannot be set when spec.os.name is windows.
                  
                • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
                  default if unset. May also be set in PodSecurityContext. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is windows.
                  
                • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
                  Kubelet will validate the image at runtime to ensure that it does not run
                  as UID 0 (root) and fail to start the container if it does. If unset or
                  false, no such validation will be performed. May also be set in
                  PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
                  the value specified in SecurityContext takes precedence.
                  
                • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
                  specified in image metadata if unspecified. May also be set in
                  PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
                  the value specified in SecurityContext takes precedence. Note that this
                  field cannot be set when spec.os.name is windows.
                  
                • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
                  container runtime will allocate a random SELinux context for each
                  container. May also be set in PodSecurityContext. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is windows.
                  
                  SELinuxOptions are the labels to be applied to the container
                  
                  

                  • level (string) Level is SELinux level label that applies to the container.
                    
                  • role (string) Role is a SELinux role label that applies to the container.
                    
                  • type (string) Type is a SELinux type label that applies to the container.
                    
                  • user (string) User is a SELinux user label that applies to the container.
                    
                • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
                  provided at both the pod & container level, the container options override
                  the pod options. Note that this field cannot be set when spec.os.name is
                  windows.
                  
                  SeccompProfile defines a pod/container's seccomp profile settings. Only one
                  profile source may be set.
                  
                  

                  • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                    be used. The profile must be preconfigured on the node to work. Must be a
                    descending path, relative to the kubelet's configured seccomp profile
                    location. Must only be set if type is "Localhost".
                    
                  • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                    are:
                    
                    Localhost - a profile defined in a file on the node should be used.
                    RuntimeDefault - the container runtime default profile should be used.
                    Unconfined - no profile should be applied.
                    
                    
                    
                • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
                  the options from the PodSecurityContext will be used. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is linux.
                  
                  WindowsSecurityContextOptions contain Windows-specific options and
                  credentials.
                  
                  

                  • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                    (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                    the GMSA credential spec named by the GMSACredentialSpecName field.
                    
                  • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                    
                  • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                    container. This field is alpha-level and will only be honored by components
                    that enable the WindowsHostProcessContainers feature flag. Setting this
                    field without the feature flag will result in errors when validating the
                    Pod. All of a Pod's containers must have the same effective HostProcess
                    value (it is not allowed to have a mix of HostProcess containers and
                    non-HostProcess containers). In addition, if HostProcess is true then
                    HostNetwork must also be set to true.
                    
                  • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                    Defaults to the user specified in image metadata if unspecified. May also
                    be set in PodSecurityContext. If set in both SecurityContext and
                    PodSecurityContext, the value specified in SecurityContext takes
                    precedence.
                    
              • startupProbe (Object) Probes are not allowed for ephemeral containers.
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
                runtime. If this is not set, reads from stdin in the container will always
                result in EOF. Default is false.
                
              • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
                been opened by a single attach. When stdin is true the stdin stream will
                remain open across multiple attach sessions. If stdinOnce is set to true,
                stdin is opened on container start, is empty until the first client
                attaches to stdin, and then remains open and accepts data until the client
                disconnects, at which time stdin is closed and remains closed until the
                container is restarted. If this flag is false, a container processes that
                reads from stdin will never receive an EOF. Default is false
                
              • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
                container targets. The ephemeral container will be run in the namespaces
                (IPC, PID, etc) of this container. If not set then the ephemeral container
                uses the namespaces configured in the Pod spec.
                
                The container runtime must implement support for this feature. If the
                runtime does not support namespace targeting then the result of setting
                this field is undefined.
                
              • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
                message will be written is mounted into the container's filesystem. Message
                written is intended to be brief final status, such as an assertion failure
                message. Will be truncated by the node if greater than 4096 bytes. The
                total message length across all containers will be limited to 12kb.
                Defaults to /dev/termination-log. Cannot be updated.
                
              • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
                contents of terminationMessagePath to populate the container status message
                on both success and failure. FallbackToLogsOnError will use the last chunk
                of container log output if the termination message file is empty and the
                container exited with an error. The log output is limited to 2048 bytes or
                80 lines, whichever is smaller. Defaults to File. Cannot be updated.
                
                
                
              • tty (boolean) Whether this container should allocate a TTY for itself, also requires
                'stdin' to be true. Default is false.
                
              • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
                
                volumeDevice describes a mapping of a raw block device within a container.
                
                

                • devicePath (string) devicePath is the path inside of the container that the device will be
                  mapped to.
                  
                • name (string) name must match the name of a persistentVolumeClaim in the pod
                  
              • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
                not allowed for ephemeral containers. Cannot be updated.
                
                VolumeMount describes a mounting of a Volume within a container.
                
                

                • mountPath (string) Path within the container at which the volume should be mounted. Must not
                  contain ':'.
                  
                • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
                  container and the other way around. When not set, MountPropagationNone is
                  used. This field is beta in 1.10.
                  
                • name (string) This must match the Name of a Volume.
                  
                • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
                  Defaults to false.
                  
                • subPath (string) Path within the volume from which the container's volume should be mounted.
                  Defaults to "" (volume's root).
                  
                • subPathExpr (string) Expanded path within the volume from which the container's volume should be
                  mounted. Behaves similarly to SubPath but environment variable references
                  $(VAR_NAME) are expanded using the container's environment. Defaults to ""
                  (volume's root). SubPathExpr and SubPath are mutually exclusive.
                  
              • workingDir (string) Container's working directory. If not specified, the container runtime's
                default will be used, which might be configured in the container image.
                Cannot be updated.
                
            • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
              the pod's hosts file if specified. This is only valid for non-hostNetwork
              pods.
              
              HostAlias holds the mapping between IP and hostnames that will be injected
              as an entry in the pod's hosts file.
              
              

              • hostnames ([]string) Hostnames for the above IP address.
                
              • ip (string) IP address of the host file entry.
                
            • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
              
            • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
              If this option is set, the ports that will be used must be specified.
              Default to false.
              
            • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
              
            • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
              be set to a system-defined value.
              
            • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
              namespace to use for pulling any of the images used by this PodSpec. If
              specified, these secrets will be passed to individual puller
              implementations for them to use. For example, in the case of docker, only
              DockerConfig type secrets are honored. More info:
              https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
              executed in order prior to containers being started. If any init container
              fails, the pod is considered to have failed and is handled according to its
              restartPolicy. The name for an init container or normal container must be
              unique among all containers. Init containers may not have Lifecycle
              actions, Readiness probes, Liveness probes, or Startup probes. The
              resourceRequirements of an init container are taken into account during
              scheduling by finding the highest request/limit for each resource type, and
              then using the max of of that value or the sum of the normal containers.
              Limits are applied to init containers in a similar fashion. Init containers
              cannot currently be added or removed. Cannot be updated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
              
              A single application container that you want to run within a pod.
              
              

              • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
                provided. Variable references $(VAR_NAME) are expanded using the
                container's environment. If a variable cannot be resolved, the reference in
                the input string will be unchanged. Double $$ are reduced to a single $,
                which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
                produce the string literal "$(VAR_NAME)". Escaped references will never be
                expanded, regardless of whether the variable exists or not. Cannot be
                updated. More info:
                https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                
              • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
                ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
                are expanded using the container's environment. If a variable cannot be
                resolved, the reference in the input string will be unchanged. Double $$
                are reduced to a single $, which allows for escaping the $(VAR_NAME)
                syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
                Escaped references will never be expanded, regardless of whether the
                variable exists or not. Cannot be updated. More info:
                https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
                
              • env ([]Object) List of environment variables to set in the container. Cannot be updated.
                
                EnvVar represents an environment variable present in a Container.
                
                

                • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
                  
                • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
                  environment variables in the container and any service environment
                  variables. If a variable cannot be resolved, the reference in the input
                  string will be unchanged. Double $$ are reduced to a single $, which allows
                  for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
                  string literal "$(VAR_NAME)". Escaped references will never be expanded,
                  regardless of whether the variable exists or not. Defaults to "".
                  
                • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
                  empty.
                  
                  EnvVarSource represents a source for the value of an EnvVar.
                  
                  

                  • configMapKeyRef (Object) Selects a key of a ConfigMap.
                    
                    Selects a key from a ConfigMap.
                    
                    

                    • key (string) The key to select.
                      
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the ConfigMap or its key must be defined
                      
                  • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                    `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                    spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                    requests.memory and requests.ephemeral-storage) are currently supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
                  • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                    
                    SecretKeySelector selects a key of a Secret.
                    
                    

                    • key (string) The key of the secret to select from. Must be a valid secret key.
                      
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the Secret or its key must be defined
                      
              • envFrom ([]Object) List of sources to populate environment variables in the container. The
                keys defined within a source must be a C_IDENTIFIER. All invalid keys will
                be reported as an event when the container is starting. When a key exists
                in multiple sources, the value associated with the last source will take
                precedence. Values defined by an Env with a duplicate key will take
                precedence. Cannot be updated.
                
                EnvFromSource represents the source of a set of ConfigMaps
                
                

                • configMapRef (Object) The ConfigMap to select from
                  
                  ConfigMapEnvSource selects a ConfigMap to populate the environment
                  variables with.
                  
                  The contents of the target ConfigMap's Data field will represent the
                  key-value pairs as environment variables.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                  • optional (boolean) Specify whether the ConfigMap must be defined
                    
                • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
                  C_IDENTIFIER.
                  
                • secretRef (Object) The Secret to select from
                  
                  SecretEnvSource selects a Secret to populate the environment variables
                  with.
                  
                  The contents of the target Secret's Data field will represent the key-value
                  pairs as environment variables.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                  • optional (boolean) Specify whether the Secret must be defined
                    
              • image (string) Docker image name. More info:
                https://kubernetes.io/docs/concepts/containers/images This field is
                optional to allow higher level config management to default or override
                container images in workload controllers like Deployments and StatefulSets.
                
              • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
                if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
                More info:
                https://kubernetes.io/docs/concepts/containers/images#updating-images
                
                
                
              • lifecycle (Object) Actions that the management system should take in response to container
                lifecycle events. Cannot be updated.
                
                Lifecycle describes actions that the management system should take in
                response to container lifecycle events. For the PostStart and PreStop
                lifecycle handlers, management of the container blocks until the action is
                complete, unless the container process fails, in which case the handler is
                aborted.
                
                

                • postStart (Object) PostStart is called immediately after a container is created. If the
                  handler fails, the container is terminated and restarted according to its
                  restart policy. Other management of the container blocks until the hook
                  completes. More info:
                  https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                  
                  LifecycleHandler defines a specific action that should be taken in a
                  lifecycle hook. One and only one of the fields, except TCPSocket must be
                  specified.
                  
                  

                  • exec (Object) Exec specifies the action to take.
                    
                    ExecAction describes a "run in container" action.
                    
                    

                    • command ([]string) Command is the command line to execute inside the container, the working
                      directory for the command is root ('/') in the container's filesystem. The
                      command is simply exec'd, it is not run inside a shell, so traditional
                      shell instructions ('|', etc) won't work. To use a shell, you need to
                      explicitly call out to that shell. Exit status of 0 is treated as
                      live/healthy and non-zero is unhealthy.
                      
                  • httpGet (Object) HTTPGet specifies the http request to perform.
                    
                    HTTPGetAction describes an action based on HTTP Get requests.
                    
                    

                    • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                      "Host" in httpHeaders instead.
                      
                    • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                      
                      HTTPHeader describes a custom header to be used in HTTP probes
                      
                      

                      • name (string) The header field name
                        
                      • value (string) The header field value
                        
                    • path (string) Path to access on the HTTP server.
                      
                    • port (string) Name or number of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                    • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                      
                      
                  • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                    the backward compatibility. There are no validation of this field and
                    lifecycle hooks will fail in runtime when tcp handler is specified.
                    
                    TCPSocketAction describes an action based on opening a socket
                    
                    

                    • host (string) Optional: Host name to connect to, defaults to the pod IP.
                      
                    • port (string) Number or name of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                • preStop (Object) PreStop is called immediately before a container is terminated due to an
                  API request or management event such as liveness/startup probe failure,
                  preemption, resource contention, etc. The handler is not called if the
                  container crashes or exits. The Pod's termination grace period countdown
                  begins before the PreStop hook is executed. Regardless of the outcome of
                  the handler, the container will eventually terminate within the Pod's
                  termination grace period (unless delayed by finalizers). Other management
                  of the container blocks until the hook completes or until the termination
                  grace period is reached. More info:
                  https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
                  
                  LifecycleHandler defines a specific action that should be taken in a
                  lifecycle hook. One and only one of the fields, except TCPSocket must be
                  specified.
                  
                  

                  • exec (Object) Exec specifies the action to take.
                    
                    ExecAction describes a "run in container" action.
                    
                    

                    • command ([]string) Command is the command line to execute inside the container, the working
                      directory for the command is root ('/') in the container's filesystem. The
                      command is simply exec'd, it is not run inside a shell, so traditional
                      shell instructions ('|', etc) won't work. To use a shell, you need to
                      explicitly call out to that shell. Exit status of 0 is treated as
                      live/healthy and non-zero is unhealthy.
                      
                  • httpGet (Object) HTTPGet specifies the http request to perform.
                    
                    HTTPGetAction describes an action based on HTTP Get requests.
                    
                    

                    • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                      "Host" in httpHeaders instead.
                      
                    • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                      
                      HTTPHeader describes a custom header to be used in HTTP probes
                      
                      

                      • name (string) The header field name
                        
                      • value (string) The header field value
                        
                    • path (string) Path to access on the HTTP server.
                      
                    • port (string) Name or number of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
                    • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                      
                      
                  • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                    the backward compatibility. There are no validation of this field and
                    lifecycle hooks will fail in runtime when tcp handler is specified.
                    
                    TCPSocketAction describes an action based on opening a socket
                    
                    

                    • host (string) Optional: Host name to connect to, defaults to the pod IP.
                      
                    • port (string) Number or name of the port to access on the container. Number must be in
                      the range 1 to 65535. Name must be an IANA_SVC_NAME.
                      
                      IntOrString is a type that can hold an int32 or a string. When used in JSON
                      or YAML marshalling and unmarshalling, it produces or consumes the inner
                      type. This allows you to have, for example, a JSON field that can accept a
                      name or number.
                      
              • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
                probe fails. Cannot be updated. More info:
                https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
                must have a unique name (DNS_LABEL). Cannot be updated.
                
              • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
                system additional information about the network connections a container
                uses, but is primarily informational. Not specifying a port here DOES NOT
                prevent that port from being exposed. Any port which is listening on the
                default "0.0.0.0" address inside a container will be accessible from the
                network. Cannot be updated.
                
                ContainerPort represents a network port in a single container.
                
                

                • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
                  number, 0 ( x ( 65536.
                  
                • hostIP (string) What host IP to bind the external port to.
                  
                • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
                  port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
                  ContainerPort. Most containers do not need this.
                  
                • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
                  named port in a pod must have a unique name. Name for the port that can be
                  referred to by services.
                  
                • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
                  
                  
              • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
                from service endpoints if the probe fails. Cannot be updated. More info:
                https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
                https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                
                ResourceRequirements describes the compute resource requirements.
                
                

                • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                  Requests is omitted for a container, it defaults to Limits if that is
                  explicitly specified, otherwise to an implementation-defined value. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
              • securityContext (Object) SecurityContext defines the security options the container should be run
                with. If set, the fields of SecurityContext override the equivalent fields
                of PodSecurityContext. More info:
                https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
                
                SecurityContext holds security configuration that will be applied to a
                container. Some fields are present in both SecurityContext and
                PodSecurityContext. When both are set, the values in SecurityContext take
                precedence.
                
                

                • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
                  privileges than its parent process. This bool directly controls if the
                  no_new_privs flag will be set on the container process.
                  AllowPrivilegeEscalation is true always when the container is: 1) run as
                  Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
                  spec.os.name is windows.
                  
                • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
                  default set of capabilities granted by the container runtime. Note that
                  this field cannot be set when spec.os.name is windows.
                  
                  Adds and removes POSIX capabilities from running containers.
                  
                  

                  • add ([]string) Added capabilities
                    
                  • drop ([]string) Removed capabilities
                    
                • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
                  essentially equivalent to root on the host. Defaults to false. Note that
                  this field cannot be set when spec.os.name is windows.
                  
                • procMount (string) procMount denotes the type of proc mount to use for the containers. The
                  default is DefaultProcMount which uses the container runtime defaults for
                  readonly paths and masked paths. This requires the ProcMountType feature
                  flag to be enabled. Note that this field cannot be set when spec.os.name is
                  windows.
                  
                • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
                  Note that this field cannot be set when spec.os.name is windows.
                  
                • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
                  default if unset. May also be set in PodSecurityContext. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is windows.
                  
                • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
                  Kubelet will validate the image at runtime to ensure that it does not run
                  as UID 0 (root) and fail to start the container if it does. If unset or
                  false, no such validation will be performed. May also be set in
                  PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
                  the value specified in SecurityContext takes precedence.
                  
                • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
                  specified in image metadata if unspecified. May also be set in
                  PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
                  the value specified in SecurityContext takes precedence. Note that this
                  field cannot be set when spec.os.name is windows.
                  
                • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
                  container runtime will allocate a random SELinux context for each
                  container. May also be set in PodSecurityContext. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is windows.
                  
                  SELinuxOptions are the labels to be applied to the container
                  
                  

                  • level (string) Level is SELinux level label that applies to the container.
                    
                  • role (string) Role is a SELinux role label that applies to the container.
                    
                  • type (string) Type is a SELinux type label that applies to the container.
                    
                  • user (string) User is a SELinux user label that applies to the container.
                    
                • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
                  provided at both the pod & container level, the container options override
                  the pod options. Note that this field cannot be set when spec.os.name is
                  windows.
                  
                  SeccompProfile defines a pod/container's seccomp profile settings. Only one
                  profile source may be set.
                  
                  

                  • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                    be used. The profile must be preconfigured on the node to work. Must be a
                    descending path, relative to the kubelet's configured seccomp profile
                    location. Must only be set if type is "Localhost".
                    
                  • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                    are:
                    
                    Localhost - a profile defined in a file on the node should be used.
                    RuntimeDefault - the container runtime default profile should be used.
                    Unconfined - no profile should be applied.
                    
                    
                    
                • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
                  the options from the PodSecurityContext will be used. If set in both
                  SecurityContext and PodSecurityContext, the value specified in
                  SecurityContext takes precedence. Note that this field cannot be set when
                  spec.os.name is linux.
                  
                  WindowsSecurityContextOptions contain Windows-specific options and
                  credentials.
                  
                  

                  • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                    (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                    the GMSA credential spec named by the GMSACredentialSpecName field.
                    
                  • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                    
                  • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                    container. This field is alpha-level and will only be honored by components
                    that enable the WindowsHostProcessContainers feature flag. Setting this
                    field without the feature flag will result in errors when validating the
                    Pod. All of a Pod's containers must have the same effective HostProcess
                    value (it is not allowed to have a mix of HostProcess containers and
                    non-HostProcess containers). In addition, if HostProcess is true then
                    HostNetwork must also be set to true.
                    
                  • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                    Defaults to the user specified in image metadata if unspecified. May also
                    be set in PodSecurityContext. If set in both SecurityContext and
                    PodSecurityContext, the value specified in SecurityContext takes
                    precedence.
                    
              • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
                specified, no other probes are executed until this completes successfully.
                If this probe fails, the Pod will be restarted, just as if the
                livenessProbe failed. This can be used to provide different probe
                parameters at the beginning of a Pod's lifecycle, when it might take a long
                time to load data or warm a cache, than during steady-state operation. This
                cannot be updated. More info:
                https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                
                Probe describes a health check to be performed against a container to
                determine whether it is alive or ready to receive traffic.
                
                

                • exec (Object) Exec specifies the action to take.
                  
                  ExecAction describes a "run in container" action.
                  
                  

                  • command ([]string) Command is the command line to execute inside the container, the working
                    directory for the command is root ('/') in the container's filesystem. The
                    command is simply exec'd, it is not run inside a shell, so traditional
                    shell instructions ('|', etc) won't work. To use a shell, you need to
                    explicitly call out to that shell. Exit status of 0 is treated as
                    live/healthy and non-zero is unhealthy.
                    
                • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
                  having succeeded. Defaults to 3. Minimum value is 1.
                  
                • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
                  requires enabling GRPCContainerProbe feature gate.
                  
                  

                  • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                    
                  • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                    (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                    
                    If this is not specified, the default behavior is defined by gRPC.
                    
                • httpGet (Object) HTTPGet specifies the http request to perform.
                  
                  HTTPGetAction describes an action based on HTTP Get requests.
                  
                  

                  • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                    "Host" in httpHeaders instead.
                    
                  • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                    
                    HTTPHeader describes a custom header to be used in HTTP probes
                    
                    

                    • name (string) The header field name
                      
                    • value (string) The header field value
                      
                  • path (string) Path to access on the HTTP server.
                    
                  • port (string) Name or number of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                  • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                    
                    
                • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
                  are initiated. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
                • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
                  value is 1.
                  
                • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
                  after having failed. Defaults to 1. Must be 1 for liveness and startup.
                  Minimum value is 1.
                  
                • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
                  
                  TCPSocketAction describes an action based on opening a socket
                  
                  

                  • host (string) Optional: Host name to connect to, defaults to the pod IP.
                    
                  • port (string) Number or name of the port to access on the container. Number must be in
                    the range 1 to 65535. Name must be an IANA_SVC_NAME.
                    
                    IntOrString is a type that can hold an int32 or a string. When used in JSON
                    or YAML marshalling and unmarshalling, it produces or consumes the inner
                    type. This allows you to have, for example, a JSON field that can accept a
                    name or number.
                    
                • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
                  probe failure. The grace period is the duration in seconds after the
                  processes running in the pod are sent a termination signal and the time
                  when the processes are forcibly halted with a kill signal. Set this value
                  longer than the expected cleanup time for your process. If this value is
                  nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
                  value overrides the value provided by the pod spec. Value must be
                  non-negative integer. The value zero indicates stop immediately via the
                  kill signal (no opportunity to shut down). This is a beta field and
                  requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
                  is 1. spec.terminationGracePeriodSeconds is used if unset.
                  
                • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
                  Minimum value is 1. More info:
                  https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
                  
              • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
                runtime. If this is not set, reads from stdin in the container will always
                result in EOF. Default is false.
                
              • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
                been opened by a single attach. When stdin is true the stdin stream will
                remain open across multiple attach sessions. If stdinOnce is set to true,
                stdin is opened on container start, is empty until the first client
                attaches to stdin, and then remains open and accepts data until the client
                disconnects, at which time stdin is closed and remains closed until the
                container is restarted. If this flag is false, a container processes that
                reads from stdin will never receive an EOF. Default is false
                
              • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
                message will be written is mounted into the container's filesystem. Message
                written is intended to be brief final status, such as an assertion failure
                message. Will be truncated by the node if greater than 4096 bytes. The
                total message length across all containers will be limited to 12kb.
                Defaults to /dev/termination-log. Cannot be updated.
                
              • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
                contents of terminationMessagePath to populate the container status message
                on both success and failure. FallbackToLogsOnError will use the last chunk
                of container log output if the termination message file is empty and the
                container exited with an error. The log output is limited to 2048 bytes or
                80 lines, whichever is smaller. Defaults to File. Cannot be updated.
                
                
                
              • tty (boolean) Whether this container should allocate a TTY for itself, also requires
                'stdin' to be true. Default is false.
                
              • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
                
                volumeDevice describes a mapping of a raw block device within a container.
                
                

                • devicePath (string) devicePath is the path inside of the container that the device will be
                  mapped to.
                  
                • name (string) name must match the name of a persistentVolumeClaim in the pod
                  
              • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
                
                VolumeMount describes a mounting of a Volume within a container.
                
                

                • mountPath (string) Path within the container at which the volume should be mounted. Must not
                  contain ':'.
                  
                • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
                  container and the other way around. When not set, MountPropagationNone is
                  used. This field is beta in 1.10.
                  
                • name (string) This must match the Name of a Volume.
                  
                • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
                  Defaults to false.
                  
                • subPath (string) Path within the volume from which the container's volume should be mounted.
                  Defaults to "" (volume's root).
                  
                • subPathExpr (string) Expanded path within the volume from which the container's volume should be
                  mounted. Behaves similarly to SubPath but environment variable references
                  $(VAR_NAME) are expanded using the container's environment. Defaults to ""
                  (volume's root). SubPathExpr and SubPath are mutually exclusive.
                  
              • workingDir (string) Container's working directory. If not specified, the container runtime's
                default will be used, which might be configured in the container image.
                Cannot be updated.
                
            • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
              non-empty, the scheduler simply schedules this pod onto that node, assuming
              that it fits resource requirements.
              
            • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
              Selector which must match a node's labels for the pod to be scheduled on
              that node. More info:
              https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
              
            • os (Object) Specifies the OS of the containers in the pod. Some pod and container
              fields are restricted if this is set.
              
              If the OS field is set to linux, the following fields must be unset:
              -securityContext.windowsOptions
              
              If the OS field is set to windows, following fields must be unset: -
              spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
              spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
              spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
              spec.shareProcessNamespace - spec.securityContext.runAsUser -
              spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
              spec.containers[*].securityContext.seLinuxOptions -
              spec.containers[*].securityContext.seccompProfile -
              spec.containers[*].securityContext.capabilities -
              spec.containers[*].securityContext.readOnlyRootFilesystem -
              spec.containers[*].securityContext.privileged -
              spec.containers[*].securityContext.allowPrivilegeEscalation -
              spec.containers[*].securityContext.procMount -
              spec.containers[*].securityContext.runAsUser -
              spec.containers[*].securityContext.runAsGroup This is an alpha field and
              requires the IdentifyPodOS feature
              
              PodOS defines the OS parameters of a pod.
              
              

              • name (string) Name is the name of the operating system. The currently supported values
                are linux and windows. Additional value may be defined in future and can be
                one of:
                https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
                Clients should expect to handle additional values and treat unrecognized
                values in this field as os: null
                
            • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
              a given RuntimeClass. This field will be autopopulated at admission time by
              the RuntimeClass admission controller. If the RuntimeClass admission
              controller is enabled, overhead must not be set in Pod create requests. The
              RuntimeClass admission controller will reject Pod create requests which
              have the overhead already set. If RuntimeClass is configured and selected
              in the PodSpec, Overhead will be set to the value defined in the
              corresponding RuntimeClass, otherwise it will remain unset and treated as
              zero. More info:
              https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
              This field is beta-level as of Kubernetes v1.18, and is only honored by
              servers that enable the PodOverhead feature.
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
              of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
              This field is beta-level, gated by the NonPreemptingPriority feature-gate.
              
            • priority (integer) The priority value. Various system components use this field to find the
              priority of the pod. When Priority Admission Controller is enabled, it
              prevents users from setting this field. The admission controller populates
              this field from PriorityClassName. The higher the value, the higher the
              priority.
              
            • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
              "system-cluster-critical" are two special keywords which indicate the
              highest priorities with the former being the highest priority. Any other
              name must be defined by creating a PriorityClass object with that name. If
              not specified, the pod priority will be default or zero if there is no
              default.
              
            • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
              pod is ready when all its containers are ready AND all conditions specified
              in the readiness gates have status equal to "True" More info:
              https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
              
              PodReadinessGate contains the reference to a pod condition
              
              

              • conditionType (string) ConditionType refers to a condition in the pod's condition list with
                matching type.
                
                
                
            • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
              Never. Default to Always. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
              
              
              
            • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
              which should be used to run this pod. If no RuntimeClass resource matches
              the named class, the pod will not be run. If unset or empty, the "legacy"
              RuntimeClass will be used, which is an implicit class with an empty
              definition that uses the default runtime handler. More info:
              https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
              beta feature as of Kubernetes v1.14.
              
            • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
              specified, the pod will be dispatched by default scheduler.
              
            • securityContext (Object) SecurityContext holds pod-level security attributes and common container
              settings. Optional: Defaults to empty. See type description for default
              values of each field.
              
              PodSecurityContext holds pod-level security attributes and common container
              settings. Some fields are also present in container.securityContext. Field
              values of container.securityContext take precedence over field values of
              PodSecurityContext.
              
              

              • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
                volume types allow the Kubelet to change the ownership of that volume to be
                owned by the pod:
                
                1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
                created in the volume will be owned by FSGroup) 3. The permission bits are
                OR'd with rw-rw----
                
                If unset, the Kubelet will not modify the ownership and permissions of any
                volume. Note that this field cannot be set when spec.os.name is windows.
                
              • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
                of the volume before being exposed inside Pod. This field will only apply
                to volume types which support fsGroup based ownership(and permissions). It
                will have no effect on ephemeral volume types such as: secret, configmaps
                and emptydir. Valid values are "OnRootMismatch" and "Always". If not
                specified, "Always" is used. Note that this field cannot be set when
                spec.os.name is windows.
                
              • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
                default if unset. May also be set in SecurityContext. If set in both
                SecurityContext and PodSecurityContext, the value specified in
                SecurityContext takes precedence for that container. Note that this field
                cannot be set when spec.os.name is windows.
                
              • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
                Kubelet will validate the image at runtime to ensure that it does not run
                as UID 0 (root) and fail to start the container if it does. If unset or
                false, no such validation will be performed. May also be set in
                SecurityContext. If set in both SecurityContext and PodSecurityContext, the
                value specified in SecurityContext takes precedence.
                
              • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
                specified in image metadata if unspecified. May also be set in
                SecurityContext. If set in both SecurityContext and PodSecurityContext, the
                value specified in SecurityContext takes precedence for that container.
                Note that this field cannot be set when spec.os.name is windows.
                
              • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
                container runtime will allocate a random SELinux context for each
                container. May also be set in SecurityContext. If set in both
                SecurityContext and PodSecurityContext, the value specified in
                SecurityContext takes precedence for that container. Note that this field
                cannot be set when spec.os.name is windows.
                
                SELinuxOptions are the labels to be applied to the container
                
                

                • level (string) Level is SELinux level label that applies to the container.
                  
                • role (string) Role is a SELinux role label that applies to the container.
                  
                • type (string) Type is a SELinux type label that applies to the container.
                  
                • user (string) User is a SELinux user label that applies to the container.
                  
              • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
                field cannot be set when spec.os.name is windows.
                
                SeccompProfile defines a pod/container's seccomp profile settings. Only one
                profile source may be set.
                
                

                • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                  be used. The profile must be preconfigured on the node to work. Must be a
                  descending path, relative to the kubelet's configured seccomp profile
                  location. Must only be set if type is "Localhost".
                  
                • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                  are:
                  
                  Localhost - a profile defined in a file on the node should be used.
                  RuntimeDefault - the container runtime default profile should be used.
                  Unconfined - no profile should be applied.
                  
                  
                  
              • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
                addition to the container's primary GID. If unspecified, no groups will be
                added to any container. Note that this field cannot be set when
                spec.os.name is windows.
                
              • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
                unsupported sysctls (by the container runtime) might fail to launch. Note
                that this field cannot be set when spec.os.name is windows.
                
                Sysctl defines a kernel parameter to be set
                
                

                • name (string) Name of a property to set
                  
                • value (string) Value of a property to set
                  
              • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
                the options within a container's SecurityContext will be used. If set in
                both SecurityContext and PodSecurityContext, the value specified in
                SecurityContext takes precedence. Note that this field cannot be set when
                spec.os.name is linux.
                
                WindowsSecurityContextOptions contain Windows-specific options and
                credentials.
                
                

                • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                  (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                  the GMSA credential spec named by the GMSACredentialSpecName field.
                  
                • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                  
                • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                  container. This field is alpha-level and will only be honored by components
                  that enable the WindowsHostProcessContainers feature flag. Setting this
                  field without the feature flag will result in errors when validating the
                  Pod. All of a Pod's containers must have the same effective HostProcess
                  value (it is not allowed to have a mix of HostProcess containers and
                  non-HostProcess containers). In addition, if HostProcess is true then
                  HostNetwork must also be set to true.
                  
                • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                  Defaults to the user specified in image metadata if unspecified. May also
                  be set in PodSecurityContext. If set in both SecurityContext and
                  PodSecurityContext, the value specified in SecurityContext takes
                  precedence.
                  
            • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
              Deprecated: Use serviceAccountName instead.
              
            • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
              pod. More info:
              https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
              
            • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
              than the leaf name (the default). In Linux containers, this means setting
              the FQDN in the hostname field of the kernel (the nodename field of struct
              utsname). In Windows containers, this means setting the registry value of
              hostname for the registry key
              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
              FQDN. If a pod does not have FQDN, this has no effect. Default to false.
              
            • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
              When this is set containers will be able to view and signal processes from
              other containers in the same pod, and the first process in each container
              will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
              be set. Optional: Default to false.
              
            • subdomain (string) If specified, the fully qualified Pod hostname will be
              "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
              specified, the pod will not have a domainname at all.
              
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
              decreased in delete request. Value must be non-negative integer. The value
              zero indicates stop immediately via the kill signal (no opportunity to shut
              down). If this value is nil, the default grace period will be used instead.
              The grace period is the duration in seconds after the processes running in
              the pod are sent a termination signal and the time when the processes are
              forcibly halted with a kill signal. Set this value longer than the expected
              cleanup time for your process. Defaults to 30 seconds.
              
            • tolerations ([]Object) If specified, the pod's tolerations.
              
              The pod this Toleration is attached to tolerates any taint that matches the
              triple (key,value,effect) using the matching operator (operator).
              
              

              • effect (string) Effect indicates the taint effect to match. Empty means match all taint
                effects. When specified, allowed values are NoSchedule, PreferNoSchedule
                and NoExecute.
                
                
                
              • key (string) Key is the taint key that the toleration applies to. Empty means match all
                taint keys. If the key is empty, operator must be Exists; this combination
                means to match all values and all keys.
                
              • operator (string) Operator represents a key's relationship to the value. Valid operators are
                Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
                value, so that a pod can tolerate all taints of a particular category.
                
                
                
              • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
                be of effect NoExecute, otherwise this field is ignored) tolerates the
                taint. By default, it is not set, which means tolerate the taint forever
                (do not evict). Zero and negative values will be treated as 0 (evict
                immediately) by the system.
                
              • value (string) Value is the taint value the toleration matches to. If the operator is
                Exists, the value should be empty, otherwise just a regular string.
                
            • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
              across topology domains. Scheduler will schedule pods in a way which abides
              by the constraints. All topologySpreadConstraints are ANDed.
              
              TopologySpreadConstraint specifies how to spread matching pods among the
              given topology.
              
              

              • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
                selector are counted to determine the number of pods in their corresponding
                topology domain.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
                When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
                difference between the number of matching pods in the target topology and
                the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
                and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
                zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
                to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
                ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
                incoming pod can be scheduled onto any zone. When
                `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
                topologies that satisfy it. It's a required field. Default value is 1 and 0
                is not allowed.
                
              • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
                key and identical values are considered to be in the same topology. We
                consider each (key, value) as a "bucket", and try to put balanced number of
                pods into each bucket. It's a required field.
                
              • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
                the spread constraint. - DoNotSchedule (default) tells the scheduler not to
                schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
                any location, but giving higher precedence to topologies that would help
                reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
                pod if and only if every possible node assignment for that pod would
                violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
                MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
                | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
                DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
                3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
                other words, the cluster can still be imbalanced, but scheduler won't make
                it *more* imbalanced. It's a required field.
                
                
                
            • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
              More info: https://kubernetes.io/docs/concepts/storage/volumes
              
              Volume represents a named volume in a pod that may be accessed by any
              container in the pod.
              
              

              • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
                kubelet's host machine and then exposed to the pod. More info:
                https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
                
                Represents a Persistent Disk resource in AWS.
                An AWS EBS disk must exist before mounting to a container. The disk must
                also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
                mounted as read/write once. AWS EBS volumes support ownership management
                and SELinux relabeling.
                
                

                • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
                  filesystem type is supported by the host operating system. Examples:
                  "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
                  
                • partition (integer) The partition in the volume that you want to mount. If omitted, the default
                  is to mount by volume name. Examples: For volume /dev/sda1, you specify the
                  partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
                  you can leave the property empty).
                  
                • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
                  "true". If omitted, the default is "false". More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
                  
                • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
                  info:
                  https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
                  
              • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
                the pod.
                
                AzureDisk represents an Azure Data Disk mount on the host and bind mount to
                the pod.
                
                

                • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
                  
                • diskName (string) The Name of the data disk in the blob storage
                  
                • diskURI (string) The URI the data disk in the blob storage
                  
                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
                  "ext4" if unspecified.
                  
                • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
                  single blob disk per storage account Managed: azure managed data disk (only
                  in managed availability set). defaults to shared
                  
                • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
                  setting in VolumeMounts.
                  
              • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
                to the pod.
                
                AzureFile represents an Azure File Service mount on the host and bind mount
                to the pod.
                
                

                • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
                  setting in VolumeMounts.
                  
                • secretName (string) the name of secret that contains Azure Storage Account Name and Key
                  
                • shareName (string) Share Name
                  
              • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
                
                Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
                volumes do not support ownership management or SELinux relabeling.
                
                

                • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
                  https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
                  
                • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
                  is /
                  
                • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
                  ReadOnly setting in VolumeMounts. More info:
                  https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
                  
                • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
                  /etc/ceph/user.secret More info:
                  https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
                  
                • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
                  default is empty. More info:
                  https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • user (string) Optional: User is the rados user name, default is admin More info:
                  https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
                  
              • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
                machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
                
                Represents a cinder volume resource in Openstack. A Cinder volume must
                exist before mounting to a container. The volume must also be in the same
                region as the kubelet. Cinder volumes support ownership management and
                SELinux relabeling.
                
                

                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
                  be "ext4" if unspecified. More info:
                  https://examples.k8s.io/mysql-cinder-pd/README.md
                  
                • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
                  ReadOnly setting in VolumeMounts. More info:
                  https://examples.k8s.io/mysql-cinder-pd/README.md
                  
                • secretRef (Object) Optional: points to a secret object containing parameters used to connect
                  to OpenStack.
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • volumeID (string) volume id used to identify the volume in cinder. More info:
                  https://examples.k8s.io/mysql-cinder-pd/README.md
                  
              • configMap (Object) ConfigMap represents a configMap that should populate this volume
                
                Adapts a ConfigMap into a volume.
                The contents of the target ConfigMap's Data field will be presented in a
                volume as files using the keys in the Data field as the file names, unless
                the items element is populated with specific mappings of keys to paths.
                ConfigMap volumes support ownership management and SELinux relabeling.
                
                

                • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
                  Must be an octal value between 0000 and 0777 or a decimal value between 0
                  and 511. YAML accepts both octal and decimal values, JSON requires decimal
                  values for mode bits. Defaults to 0644. Directories within the path are not
                  affected by this setting. This might be in conflict with other options that
                  affect the file mode, like fsGroup, and the result can be other mode bits
                  set.
                  
                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
                handled by certain external CSI drivers (Beta feature).
                
                Represents a source location of a volume to mount, managed by an external
                CSI driver
                
                

                • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
                  your admin for the correct name as registered in the cluster.
                  
                • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
                  empty value is passed to the associated CSI driver which will determine the
                  default filesystem to apply.
                  
                • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
                  sensitive information to pass to the CSI driver to complete the CSI
                  NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
                  and may be empty if no secret is required. If the secret object contains
                  more than one secret, all secret references are passed.
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
                  (read/write).
                  
                • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
                  CSI driver. Consult your driver's documentation for supported values.
                  
              • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
                volume
                
                DownwardAPIVolumeSource represents a volume containing downward API info.
                Downward API volumes support ownership management and SELinux relabeling.
                
                

                • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
                  mode bits used to set permissions on created files by default. Must be an
                  octal value between 0000 and 0777 or a decimal value between 0 and 511.
                  YAML accepts both octal and decimal values, JSON requires decimal values
                  for mode bits. Defaults to 0644. Directories within the path are not
                  affected by this setting. This might be in conflict with other options that
                  affect the file mode, like fsGroup, and the result can be other mode bits
                  set.
                  
                • items ([]Object) Items is a list of downward API volume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
                More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
                
                Represents an empty directory for a pod. Empty directory volumes support
                ownership management and SELinux relabeling.
                
                

                • medium (string) What type of storage medium should back this directory. The default is ""
                  which means to use the node's default medium. Must be an empty string
                  (default) or Memory. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#emptydir
                  
                • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
                  limit is also applicable for memory medium. The maximum usage on memory
                  medium EmptyDir would be the minimum value between the SizeLimit specified
                  here and the sum of memory limits of all containers in a pod. The default
                  is nil which means that the limit is undefined. More info:
                  http://kubernetes.io/docs/user-guide/volumes#emptydir
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
              • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
                The volume's lifecycle is tied to the pod that defines it - it will be
                created before the pod starts, and deleted when the pod is removed.
                
                Use this if: a) the volume is only needed while the pod runs, b) features
                of normal volumes like restoring from snapshot or capacity tracking are
                needed, c) the storage driver is specified through a storage class, and d)
                the storage driver supports dynamic volume provisioning through a
                PersistentVolumeClaim (see EphemeralVolumeSource for more information on
                the connection between this volume type and PersistentVolumeClaim).
                
                Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
                that persist for longer than the lifecycle of an individual pod.
                
                Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
                to be used that way - see the documentation of the driver for more
                information.
                
                A pod can use both types of ephemeral volumes and persistent volumes at the
                same time.
                
                Represents an ephemeral volume that is handled by a normal storage driver.
                
                

                • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
                  in which this EphemeralVolumeSource is embedded will be the owner of the
                  PVC, i.e. the PVC will be deleted together with the pod. The name of the
                  PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
                  from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
                  if the concatenated name is not valid for a PVC (for example, too long).
                  
                  An existing PVC with that name that is not owned by the pod will *not* be
                  used for the pod to avoid using an unrelated volume by mistake. Starting
                  the pod is then blocked until the unrelated PVC is removed. If such a
                  pre-created PVC is meant to be used by the pod, the PVC has to updated with
                  an owner reference to the pod once the pod exists. Normally this should not
                  be necessary, but it may be useful when manually reconstructing a broken
                  cluster.
                  
                  This field is read-only and no changes will be made by Kubernetes to the
                  PVC after it has been created.
                  
                  Required, must not be nil.
                  
                  PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
                  objects as part of an EphemeralVolumeSource.
                  
                  

                  • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                    creating it. No other fields are allowed and will be rejected during
                    validation.
                    
                    ObjectMeta is metadata that all persisted resources must have, which
                    includes all objects users must create.
                    
                    

                    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                      may be set by external tools to store and retrieve arbitrary metadata. They
                      are not queryable and should be preserved when modifying objects. More
                      info: http://kubernetes.io/docs/user-guide/annotations
                      
                    • clusterName (string) The name of the cluster which the object belongs to. This is used to
                      distinguish resources with same name and namespace in different clusters.
                      This field is not set anywhere right now and apiserver is going to ignore
                      it if set in create or update request.
                      
                    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                      object was created. It is not guaranteed to be set in happens-before order
                      across separate operations. Clients may not set this value. It is
                      represented in RFC3339 form and is in UTC.
                      
                      Populated by the system. Read-only. Null for lists. More info:
                      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                      
                      Time is a wrapper around time.Time which supports correct marshaling to
                      YAML and JSON. Wrappers are provided for many of the factory methods that
                      the time package offers.
                      
                    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                      will be removed from the system. Only set when deletionTimestamp is also
                      set. May only be shortened. Read-only.
                      
                    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                      deleted. This field is set by the server when a graceful deletion is
                      requested by the user, and is not directly settable by a client. The
                      resource is expected to be deleted (no longer visible from resource lists,
                      and not reachable by name) after the time in this field, once the
                      finalizers list is empty. As long as the finalizers list contains items,
                      deletion is blocked. Once the deletionTimestamp is set, this value may not
                      be unset or be set further into the future, although it may be shortened or
                      the resource may be deleted prior to this time. For example, a user may
                      request that a pod is deleted in 30 seconds. The Kubelet will react by
                      sending a graceful termination signal to the containers in the pod. After
                      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                      to the container and after cleanup, remove the pod from the API. In the
                      presence of network partitions, this object may still exist after this
                      timestamp, until an administrator or automated process can determine the
                      resource is fully terminated. If not set, graceful deletion of the object
                      has not been requested.
                      
                      Populated by the system when a graceful deletion is requested. Read-only.
                      More info:
                      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                      
                      Time is a wrapper around time.Time which supports correct marshaling to
                      YAML and JSON. Wrappers are provided for many of the factory methods that
                      the time package offers.
                      
                    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                      an identifier for the responsible component that will remove the entry from
                      the list. If the deletionTimestamp of the object is non-nil, entries in
                      this list can only be removed. Finalizers may be processed and removed in
                      any order. Order is NOT enforced because it introduces significant risk of
                      stuck finalizers. finalizers is a shared field, any actor with permission
                      can reorder it. If the finalizer list is processed in order, then this can
                      lead to a situation in which the component responsible for the first
                      finalizer in the list is waiting for a signal (field value, external
                      system, or other) produced by a component responsible for a finalizer later
                      in the list, resulting in a deadlock. Without enforced ordering finalizers
                      are free to order amongst themselves and are not vulnerable to ordering
                      changes in the list.
                      
                    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                      unique name ONLY IF the Name field has not been provided. If this field is
                      used, the name returned to the client will be different than the name
                      passed. This value will also be combined with a unique suffix. The provided
                      value has the same validation rules as the Name field, and may be truncated
                      by the length of the suffix required to make the value unique on the
                      server.
                      
                      If this field is specified and the generated name exists, the server will
                      NOT return a 409 - instead, it will either return 201 Created or 500 with
                      Reason ServerTimeout indicating a unique name could not be found in the
                      time allotted, and the client should retry (optionally after the time
                      indicated in the Retry-After header).
                      
                      Applied only if Name is not specified. More info:
                      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                      
                    • generation (integer) A sequence number representing a specific generation of the desired state.
                      Populated by the system. Read-only.
                      
                    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                      (scope and select) objects. May match selectors of replication controllers
                      and services. More info: http://kubernetes.io/docs/user-guide/labels
                      
                    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                      managed by that workflow. This is mostly for internal housekeeping, and
                      users typically shouldn't need to set or understand this field. A workflow
                      can be the user's name, a controller's name, or the name of a specific
                      apply path like "ci-cd". The set of fields is always in the version that
                      the workflow used when modifying the object.
                      
                      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                      the resource that the fieldset applies to.
                      
                      

                      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                        to. The format is "group/version" just like the top-level APIVersion field.
                        It is necessary to track the version of a field set because it cannot be
                        automatically converted.
                        
                      • fieldsType (string) FieldsType is the discriminator for the different fields format and
                        version. There is currently only one possible value: "FieldsV1"
                        
                      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                        type.
                        
                        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                        format.
                        
                        Each key is either a '.' representing the field itself, and will always map
                        to an empty set, or a string representing a sub-field or item. The string
                        will follow one of these four formats: 'f:(name)', where (name) is the name
                        of a field in a struct, or key in a map 'v:(value)', where (value) is the
                        exact json formatted value of a list item 'i:(index)', where (index) is
                        position of a item in a list 'k:(keys)', where (keys) is a map of a list
                        item's key fields to their unique values If a key maps to an empty Fields
                        value, the field that key represents is part of the set.
                        
                        The exact format is defined in sigs.k8s.io/structured-merge-diff
                        
                        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                        format.
                        
                        Each key is either a '.' representing the field itself, and will always map
                        to an empty set, or a string representing a sub-field or item. The string
                        will follow one of these four formats: 'f:(name)', where (name) is the name
                        of a field in a struct, or key in a map 'v:(value)', where (value) is the
                        exact json formatted value of a list item 'i:(index)', where (index) is
                        position of a item in a list 'k:(keys)', where (keys) is a map of a list
                        item's key fields to their unique values If a key maps to an empty Fields
                        value, the field that key represents is part of the set.
                        
                        The exact format is defined in sigs.k8s.io/structured-merge-diff
                        
                      • manager (string) Manager is an identifier of the workflow managing these fields.
                        
                      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                        being created. The only valid values for this field are 'Apply' and
                        'Update'.
                        
                      • subresource (string) Subresource is the name of the subresource used to update that object, or
                        empty string if the object was updated through the main resource. The value
                        of this field is used to distinguish between managers, even if they share
                        the same name. For example, a status update will be distinct from a regular
                        update using the same manager name. Note that the APIVersion field is not
                        related to the Subresource field and it always corresponds to the version
                        of the main resource.
                        
                      • time (string) Time is timestamp of when these fields were set. It should always be empty
                        if Operation is 'Apply'
                        
                        Time is a wrapper around time.Time which supports correct marshaling to
                        YAML and JSON. Wrappers are provided for many of the factory methods that
                        the time package offers.
                        
                    • name (string) Name must be unique within a namespace. Is required when creating
                      resources, although some resources may allow a client to request the
                      generation of an appropriate name automatically. Name is primarily intended
                      for creation idempotence and configuration definition. Cannot be updated.
                      More info: http://kubernetes.io/docs/user-guide/identifiers#names
                      
                    • namespace (string) Namespace defines the space within which each name must be unique. An empty
                      namespace is equivalent to the "default" namespace, but "default" is the
                      canonical representation. Not all objects are required to be scoped to a
                      namespace - the value of this field for those objects will be empty.
                      
                      Must be a DNS_LABEL. Cannot be updated. More info:
                      http://kubernetes.io/docs/user-guide/namespaces
                      
                    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                      been deleted, this object will be garbage collected. If this object is
                      managed by a controller, then an entry in this list will point to this
                      controller, with the controller field set to true. There cannot be more
                      than one managing controller.
                      
                      OwnerReference contains enough information to let you identify an owning
                      object. An owning object must be in the same namespace as the dependent, or
                      be cluster-scoped, so there is no namespace field.
                      
                      

                      • apiVersion (string) API version of the referent.
                        
                      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                        owner cannot be deleted from the key-value store until this reference is
                        removed. Defaults to false. To set this field, a user needs "delete"
                        permission of the owner, otherwise 422 (Unprocessable Entity) will be
                        returned.
                        
                      • controller (boolean) If true, this reference points to the managing controller.
                        
                      • kind (string) Kind of the referent. More info:
                        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                        
                      • name (string) Name of the referent. More info:
                        http://kubernetes.io/docs/user-guide/identifiers#names
                        
                      • uid (string) UID of the referent. More info:
                        http://kubernetes.io/docs/user-guide/identifiers#uids
                        
                    • resourceVersion (string) An opaque value that represents the internal version of this object that
                      can be used by clients to determine when objects have changed. May be used
                      for optimistic concurrency, change detection, and the watch operation on a
                      resource or set of resources. Clients must treat these values as opaque and
                      passed unmodified back to the server. They may only be valid for a
                      particular resource or set of resources.
                      
                      Populated by the system. Read-only. Value must be treated as opaque by
                      clients and . More info:
                      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                      
                    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                      Read-only.
                      
                      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                      the field is planned to be removed in 1.21 release.
                      
                    • uid (string) UID is the unique in time and space value for this object. It is typically
                      generated by the server on successful creation of a resource and is not
                      allowed to change on PUT operations.
                      
                      Populated by the system. Read-only. More info:
                      http://kubernetes.io/docs/user-guide/identifiers#uids
                      
                  • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                    copied unchanged into the PVC that gets created from this template. The
                    same fields as in a PersistentVolumeClaim are also valid here.
                    
                    PersistentVolumeClaimSpec describes the common attributes of storage
                    devices and allows a Source for provider-specific attributes
                    
                    

                    • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                      info:
                      https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                      
                    • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                      object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                      (PersistentVolumeClaim) If the provisioner or an external controller can
                      support the specified data source, it will create a new volume based on the
                      contents of the specified data source. If the AnyVolumeDataSource feature
                      gate is enabled, this field will always have the same contents as the
                      DataSourceRef field.
                      
                      TypedLocalObjectReference contains enough information to let you locate the
                      typed referenced object inside the same namespace.
                      
                      

                      • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                        specified, the specified Kind must be in the core API group. For any other
                        third-party types, APIGroup is required.
                        
                      • kind (string) Kind is the type of resource being referenced
                        
                      • name (string) Name is the name of resource being referenced
                        
                    • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                      non-empty volume is desired. This may be any local object from a non-empty
                      API group (non core object) or a PersistentVolumeClaim object. When this
                      field is specified, volume binding will only succeed if the type of the
                      specified object matches some installed volume populator or dynamic
                      provisioner. This field will replace the functionality of the DataSource
                      field and as such if both fields are non-empty, they must have the same
                      value. For backwards compatibility, both fields (DataSource and
                      DataSourceRef) will be set to the same value automatically if one of them
                      is empty and the other is non-empty. There are two important differences
                      between DataSource and DataSourceRef: * While DataSource only allows two
                      specific types of objects, DataSourceRef allows any non-core object, as
                      well as PersistentVolumeClaim objects.
                      * While DataSource ignores disallowed values (dropping them), DataSourceRef
                      preserves all values, and generates an error if a disallowed value is
                      specified. (Alpha) Using this field requires the AnyVolumeDataSource
                      feature gate to be enabled.
                      
                      TypedLocalObjectReference contains enough information to let you locate the
                      typed referenced object inside the same namespace.
                      
                      

                      • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                        specified, the specified Kind must be in the core API group. For any other
                        third-party types, APIGroup is required.
                        
                      • kind (string) Kind is the type of resource being referenced
                        
                      • name (string) Name is the name of resource being referenced
                        
                    • resources (Object) Resources represents the minimum resources the volume should have. If
                      RecoverVolumeExpansionFailure feature is enabled users are allowed to
                      specify resource requirements that are lower than previous value but must
                      still be higher than capacity recorded in the status field of the claim.
                      More info:
                      https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                      
                      ResourceRequirements describes the compute resource requirements.
                      
                      

                      • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                        info:
                        https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        
                        Quantity is a fixed-point representation of a number. It provides
                        convenient marshaling/unmarshaling in JSON and YAML, in addition to
                        String() and AsInt64() accessors.
                        
                        The serialization format is:
                        
                        (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                        from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                        (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                        (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                        (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                        (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                        See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                        | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                        choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                        (signedNumber)
                        
                        No matter which of the three exponent forms is used, no quantity may
                        represent a number greater than 2^63-1 in magnitude, nor may it have more
                        than 3 decimal places. Numbers larger or more precise will be capped or
                        rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                        future if we require larger or smaller quantities.
                        
                        When a Quantity is parsed from a string, it will remember the type of
                        suffix it had, and will use the same type again when it is serialized.
                        
                        Before serializing, Quantity will be put in "canonical form". This means
                        that Exponent/suffix will be adjusted up or down (with a corresponding
                        increase or decrease in Mantissa) such that:
                        a. No precision is lost b. No fractional digits will be emitted c. The
                        exponent (or suffix) is as large as possible. The sign will be omitted
                        unless the number is negative.
                        
                        Examples:
                        1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                        
                        Note that the quantity will NEVER be internally represented by a floating
                        point number. That is the whole point of this exercise.
                        
                        Non-canonical values will still parse as long as they are well formed, but
                        will be re-emitted in their canonical form. (So always use canonical form,
                        or don't diff.)
                        
                        This format is intended to make it difficult to use these numbers without
                        writing some sort of special handling code in the hopes that that will
                        cause implementors to also use a fixed point implementation.
                        
                      • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                        Requests is omitted for a container, it defaults to Limits if that is
                        explicitly specified, otherwise to an implementation-defined value. More
                        info:
                        https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                        
                        Quantity is a fixed-point representation of a number. It provides
                        convenient marshaling/unmarshaling in JSON and YAML, in addition to
                        String() and AsInt64() accessors.
                        
                        The serialization format is:
                        
                        (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                        from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                        (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                        (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                        (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                        (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                        See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                        | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                        choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                        (signedNumber)
                        
                        No matter which of the three exponent forms is used, no quantity may
                        represent a number greater than 2^63-1 in magnitude, nor may it have more
                        than 3 decimal places. Numbers larger or more precise will be capped or
                        rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                        future if we require larger or smaller quantities.
                        
                        When a Quantity is parsed from a string, it will remember the type of
                        suffix it had, and will use the same type again when it is serialized.
                        
                        Before serializing, Quantity will be put in "canonical form". This means
                        that Exponent/suffix will be adjusted up or down (with a corresponding
                        increase or decrease in Mantissa) such that:
                        a. No precision is lost b. No fractional digits will be emitted c. The
                        exponent (or suffix) is as large as possible. The sign will be omitted
                        unless the number is negative.
                        
                        Examples:
                        1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                        
                        Note that the quantity will NEVER be internally represented by a floating
                        point number. That is the whole point of this exercise.
                        
                        Non-canonical values will still parse as long as they are well formed, but
                        will be re-emitted in their canonical form. (So always use canonical form,
                        or don't diff.)
                        
                        This format is intended to make it difficult to use these numbers without
                        writing some sort of special handling code in the hopes that that will
                        cause implementors to also use a fixed point implementation.
                        
                    • selector (Object) A label query over volumes to consider for binding.
                      
                      A label selector is a label query over a set of resources. The result of
                      matchLabels and matchExpressions are ANDed. An empty label selector matches
                      all objects. A null label selector matches no objects.
                      
                      

                      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                        are ANDed.
                        
                        A label selector requirement is a selector that contains values, a key, and
                        an operator that relates the key and values.
                        
                        

                        • key (string) key is the label key that the selector applies to.
                          
                        • operator (string) operator represents a key's relationship to a set of values. Valid
                          operators are In, NotIn, Exists and DoesNotExist.
                          
                        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                          values array must be non-empty. If the operator is Exists or DoesNotExist,
                          the values array must be empty. This array is replaced during a strategic
                          merge patch.
                          
                      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                        matchLabels map is equivalent to an element of matchExpressions, whose key
                        field is "key", the operator is "In", and the values array contains only
                        "value". The requirements are ANDed.
                        
                    • storageClassName (string) Name of the StorageClass required by the claim. More info:
                      https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                      
                    • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                      Filesystem is implied when not included in claim spec.
                      
                    • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                      claim.
                      
              • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
                machine and then exposed to the pod.
                
                Represents a Fibre Channel volume. Fibre Channel volumes can only be
                mounted as read/write once. Fibre Channel volumes support ownership
                management and SELinux relabeling.
                
                

                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
                  "ext4" if unspecified.
                  
                • lun (integer) Optional: FC target lun number
                  
                • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
                  ReadOnly setting in VolumeMounts.
                  
                • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
                  
                • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
                  combination of targetWWNs and lun must be set, but not both simultaneously.
                  
              • flexVolume (Object) FlexVolume represents a generic volume resource that is
                provisioned/attached using an exec based plugin.
                
                FlexVolume represents a generic volume resource that is
                provisioned/attached using an exec based plugin.
                
                

                • driver (string) Driver is the name of the driver to use for this volume.
                  
                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
                  on FlexVolume script.
                  
                • options (map[string]string) Optional: Extra command options if any.
                  
                • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
                  ReadOnly setting in VolumeMounts.
                  
                • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
                  information to pass to the plugin scripts. This may be empty if no secret
                  object is specified. If the secret object contains more than one secret,
                  all secrets are passed to the plugin scripts.
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
              • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
                This depends on the Flocker control service being running
                
                Represents a Flocker volume mounted by the Flocker agent. One and only one
                of datasetName and datasetUUID should be set. Flocker volumes do not
                support ownership management or SELinux relabeling.
                
                

                • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
                  should be considered as deprecated
                  
                • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
                  
              • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
                kubelet's host machine and then exposed to the pod. More info:
                https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
                
                Represents a Persistent Disk resource in Google Compute Engine.
                A GCE PD must exist before mounting to a container. The disk must also be
                in the same GCE project and zone as the kubelet. A GCE PD can only be
                mounted as read/write once or read-only many times. GCE PDs support
                ownership management and SELinux relabeling.
                
                

                • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
                  filesystem type is supported by the host operating system. Examples:
                  "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
                  
                • partition (integer) The partition in the volume that you want to mount. If omitted, the default
                  is to mount by volume name. Examples: For volume /dev/sda1, you specify the
                  partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
                  you can leave the property empty). More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
                  
                • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
                  
                • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
                  false. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
                  
              • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
                GitRepo is deprecated. To provision a container with a git repo, mount an
                EmptyDir into an InitContainer that clones the repo using git, then mount
                the EmptyDir into the Pod's container.
                
                Represents a volume that is populated with the contents of a git
                repository. Git repo volumes do not support ownership management. Git repo
                volumes support SELinux relabeling.
                
                DEPRECATED: GitRepo is deprecated. To provision a container with a git
                repo, mount an EmptyDir into an InitContainer that clones the repo using
                git, then mount the EmptyDir into the Pod's container.
                
                

                • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
                  supplied, the volume directory will be the git repository. Otherwise, if
                  specified, the volume will contain the git repository in the subdirectory
                  with the given name.
                  
                • repository (string) Repository URL
                  
                • revision (string) Commit hash for the specified revision.
                  
              • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
                lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
                
                Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
                volumes do not support ownership management or SELinux relabeling.
                
                

                • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
                  info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
                  
                • path (string) Path is the Glusterfs volume path. More info:
                  https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
                  
                • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
                  permissions. Defaults to false. More info:
                  https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
                  
              • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
                that is directly exposed to the container. This is generally used for
                system agents or other privileged things that are allowed to see the host
                machine. Most containers will NOT need this. More info:
                https://kubernetes.io/docs/concepts/storage/volumes#hostpath
                
                Represents a host path mapped into a pod. Host path volumes do not support
                ownership management or SELinux relabeling.
                
                

                • path (string) Path of the directory on the host. If the path is a symlink, it will follow
                  the link to the real path. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#hostpath
                  
                • type (string) Type for HostPath Volume Defaults to "" More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#hostpath
                  
              • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
                host machine and then exposed to the pod. More info:
                https://examples.k8s.io/volumes/iscsi/README.md
                
                Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
                once. ISCSI volumes support ownership management and SELinux relabeling.
                
                

                • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
                  
                • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
                  
                • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
                  filesystem type is supported by the host operating system. Examples:
                  "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                  More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
                  
                • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
                  iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
                  name) will be created for the connection.
                  
                • iqn (string) Target iSCSI Qualified Name.
                  
                • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
                  (tcp).
                  
                • lun (integer) iSCSI Target Lun number.
                  
                • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
                  port is other than default (typically TCP ports 860 and 3260).
                  
                • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
                  false.
                  
                • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
                  is other than default (typically TCP ports 860 and 3260).
                  
              • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
                info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
                
                Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
                not support ownership management or SELinux relabeling.
                
                

                • path (string) Path that is exported by the NFS server. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#nfs
                  
                • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
                  permissions. Defaults to false. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#nfs
                  
                • server (string) Server is the hostname or IP address of the NFS server. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#nfs
                  
              • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
                PersistentVolumeClaim in the same namespace. More info:
                https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
                
                PersistentVolumeClaimVolumeSource references the user's PVC in the same
                namespace. This volume finds the bound PV and mounts that volume for the
                pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
                another type of volume that is owned by someone else (the system).
                
                

                • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
                  the pod using this volume. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
                  
                • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
                  
              • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
                and mounted on kubelets host machine
                
                Represents a Photon Controller persistent disk resource.
                
                

                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
                  "ext4" if unspecified.
                  
                • pdID (string) ID that identifies Photon Controller persistent disk
                  
              • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
                kubelets host machine
                
                PortworxVolumeSource represents a Portworx volume resource.
                
                

                • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
                  supported by the host operating system. Ex. "ext4", "xfs". Implicitly
                  inferred to be "ext4" if unspecified.
                  
                • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
                  setting in VolumeMounts.
                  
                • volumeID (string) VolumeID uniquely identifies a Portworx volume
                  
              • projected (Object) Items for all in one resources secrets, configmaps, and downward API
                
                Represents a projected volume source
                
                

                • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
                  octal value between 0000 and 0777 or a decimal value between 0 and 511.
                  YAML accepts both octal and decimal values, JSON requires decimal values
                  for mode bits. Directories within the path are not affected by this
                  setting. This might be in conflict with other options that affect the file
                  mode, like fsGroup, and the result can be other mode bits set.
                  
                • sources ([]Object) list of volume projections
                  
                  Projection that may be projected along with other supported volume types
                  
                  

                  • configMap (Object) information about the configMap data to project
                    
                    Adapts a ConfigMap into a projected volume.
                    The contents of the target ConfigMap's Data field will be presented in a
                    projected volume as files using the keys in the Data field as the file
                    names, unless the items element is populated with specific mappings of keys
                    to paths. Note that this is identical to a configmap volume source without
                    the default mode.
                    
                    

                    • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                      ConfigMap will be projected into the volume as a file whose name is the key
                      and content is the value. If specified, the listed keys will be projected
                      into the specified paths, and unlisted keys will not be present. If a key
                      is specified which is not present in the ConfigMap, the volume setup will
                      error unless it is marked optional. Paths must be relative and may not
                      contain the '..' path or start with '..'.
                      
                      Maps a string key to a path within a volume.
                      
                      

                      • key (string) The key to project.
                        
                      • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                        value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                        accepts both octal and decimal values, JSON requires decimal values for
                        mode bits. If not specified, the volume defaultMode will be used. This
                        might be in conflict with other options that affect the file mode, like
                        fsGroup, and the result can be other mode bits set.
                        
                      • path (string) The relative path of the file to map the key to. May not be an absolute
                        path. May not contain the path element '..'. May not start with the string
                        '..'.
                        
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                      
                  • downwardAPI (Object) information about the downwardAPI data to project
                    
                    Represents downward API info for projecting into a projected volume. Note
                    that this is identical to a downwardAPI volume source without the default
                    mode.
                    
                    

                    • items ([]Object) Items is a list of DownwardAPIVolume file
                      
                      DownwardAPIVolumeFile represents information to create the file containing
                      the pod field
                      
                      

                      • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                        namespace are supported.
                        
                        ObjectFieldSelector selects an APIVersioned field of an object.
                        
                        

                        • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                          "v1".
                          
                        • fieldPath (string) Path of the field to select in the specified API version.
                          
                      • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                        value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                        accepts both octal and decimal values, JSON requires decimal values for
                        mode bits. If not specified, the volume defaultMode will be used. This
                        might be in conflict with other options that affect the file mode, like
                        fsGroup, and the result can be other mode bits set.
                        
                      • path (string) Required: Path is the relative path name of the file to be created. Must
                        not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                        item of the relative path must not start with '..'
                        
                      • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                        (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                        supported.
                        
                        ResourceFieldSelector represents container resources (cpu, memory) and
                        their output format
                        
                        

                        • containerName (string) Container name: required for volumes, optional for env vars
                          
                        • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                          
                          Quantity is a fixed-point representation of a number. It provides
                          convenient marshaling/unmarshaling in JSON and YAML, in addition to
                          String() and AsInt64() accessors.
                          
                          The serialization format is:
                          
                          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                          (signedNumber)
                          
                          No matter which of the three exponent forms is used, no quantity may
                          represent a number greater than 2^63-1 in magnitude, nor may it have more
                          than 3 decimal places. Numbers larger or more precise will be capped or
                          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                          future if we require larger or smaller quantities.
                          
                          When a Quantity is parsed from a string, it will remember the type of
                          suffix it had, and will use the same type again when it is serialized.
                          
                          Before serializing, Quantity will be put in "canonical form". This means
                          that Exponent/suffix will be adjusted up or down (with a corresponding
                          increase or decrease in Mantissa) such that:
                          a. No precision is lost b. No fractional digits will be emitted c. The
                          exponent (or suffix) is as large as possible. The sign will be omitted
                          unless the number is negative.
                          
                          Examples:
                          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                          
                          Note that the quantity will NEVER be internally represented by a floating
                          point number. That is the whole point of this exercise.
                          
                          Non-canonical values will still parse as long as they are well formed, but
                          will be re-emitted in their canonical form. (So always use canonical form,
                          or don't diff.)
                          
                          This format is intended to make it difficult to use these numbers without
                          writing some sort of special handling code in the hopes that that will
                          cause implementors to also use a fixed point implementation.
                          
                        • resource (string) Required: resource to select
                          
                  • secret (Object) information about the secret data to project
                    
                    Adapts a secret into a projected volume.
                    The contents of the target Secret's Data field will be presented in a
                    projected volume as files using the keys in the Data field as the file
                    names. Note that this is identical to a secret volume source without the
                    default mode.
                    
                    

                    • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                      Secret will be projected into the volume as a file whose name is the key
                      and content is the value. If specified, the listed keys will be projected
                      into the specified paths, and unlisted keys will not be present. If a key
                      is specified which is not present in the Secret, the volume setup will
                      error unless it is marked optional. Paths must be relative and may not
                      contain the '..' path or start with '..'.
                      
                      Maps a string key to a path within a volume.
                      
                      

                      • key (string) The key to project.
                        
                      • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                        value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                        accepts both octal and decimal values, JSON requires decimal values for
                        mode bits. If not specified, the volume defaultMode will be used. This
                        might be in conflict with other options that affect the file mode, like
                        fsGroup, and the result can be other mode bits set.
                        
                      • path (string) The relative path of the file to map the key to. May not be an absolute
                        path. May not contain the path element '..'. May not start with the string
                        '..'.
                        
                    • name (string) Name of the referent. More info:
                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                      
                    • optional (boolean) Specify whether the Secret or its key must be defined
                      
                  • serviceAccountToken (Object) information about the serviceAccountToken data to project
                    
                    ServiceAccountTokenProjection represents a projected service account token
                    volume. This projection can be used to insert a service account token into
                    the pods runtime filesystem for use against APIs (Kubernetes API Server or
                    otherwise).
                    
                    

                    • audience (string) Audience is the intended audience of the token. A recipient of a token must
                      identify itself with an identifier specified in the audience of the token,
                      and otherwise should reject the token. The audience defaults to the
                      identifier of the apiserver.
                      
                    • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                      account token. As the token approaches expiration, the kubelet volume
                      plugin will proactively rotate the service account token. The kubelet will
                      start trying to rotate the token if the token is older than 80 percent of
                      its time to live or if the token is older than 24 hours.Defaults to 1 hour
                      and must be at least 10 minutes.
                      
                    • path (string) Path is the path relative to the mount point of the file to project the
                      token into.
                      
              • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
                
                Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
                volumes do not support ownership management or SELinux relabeling.
                
                

                • group (string) Group to map volume access to Default is no group
                  
                • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
                  permissions. Defaults to false.
                  
                • registry (string) Registry represents a single or multiple Quobyte Registry services
                  specified as a string as host:port pair (multiple entries are separated
                  with commas) which acts as the central registry for volumes
                  
                • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
                  provisioned Quobyte volumes, value is set by the plugin
                  
                • user (string) User to map volume access to Defaults to serivceaccount user
                  
                • volume (string) Volume is a string that references an already created Quobyte volume by
                  name.
                  
              • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
                lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
                
                Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
                volumes support ownership management and SELinux relabeling.
                
                

                • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
                  filesystem type is supported by the host operating system. Examples:
                  "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
                  More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
                  
                • image (string) The rados image name. More info:
                  https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
                • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
                  More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
                • monitors ([]string) A collection of Ceph monitors. More info:
                  https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
                • pool (string) The rados pool name. Default is rbd. More info:
                  https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
                • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
                  false. More info:
                  https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
                • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
                  overrides keyring. Default is nil. More info:
                  https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • user (string) The rados user name. Default is admin. More info:
                  https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
                  
              • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
                Kubernetes nodes.
                
                ScaleIOVolumeSource represents a persistent ScaleIO volume
                
                

                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
                  
                • gateway (string) The host address of the ScaleIO API Gateway.
                  
                • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
                  
                • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
                  setting in VolumeMounts.
                  
                • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
                  information. If this is not provided, Login operation will fail.
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
                  
                • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
                  ThinProvisioned. Default is ThinProvisioned.
                  
                • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
                  
                • system (string) The name of the storage system as configured in ScaleIO.
                  
                • volumeName (string) The name of a volume already created in the ScaleIO system that is
                  associated with this volume source.
                  
              • secret (Object) Secret represents a secret that should populate this volume. More info:
                https://kubernetes.io/docs/concepts/storage/volumes#secret
                
                Adapts a Secret into a volume.
                The contents of the target Secret's Data field will be presented in a
                volume as files using the keys in the Data field as the file names. Secret
                volumes support ownership management and SELinux relabeling.
                
                

                • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
                  Must be an octal value between 0000 and 0777 or a decimal value between 0
                  and 511. YAML accepts both octal and decimal values, JSON requires decimal
                  values for mode bits. Defaults to 0644. Directories within the path are not
                  affected by this setting. This might be in conflict with other options that
                  affect the file mode, like fsGroup, and the result can be other mode bits
                  set.
                  
                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • optional (boolean) Specify whether the Secret or its keys must be defined
                  
                • secretName (string) Name of the secret in the pod's namespace to use. More info:
                  https://kubernetes.io/docs/concepts/storage/volumes#secret
                  
              • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
                nodes.
                
                Represents a StorageOS persistent volume resource.
                
                

                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
                  "ext4" if unspecified.
                  
                • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
                  setting in VolumeMounts.
                  
                • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
                  credentials. If not specified, default values will be attempted.
                  
                  LocalObjectReference contains enough information to let you locate the
                  referenced object inside the same namespace.
                  
                  

                  • name (string) Name of the referent. More info:
                    https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                    
                • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
                  are only unique within a namespace.
                  
                • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
                  namespace is specified then the Pod's namespace will be used. This allows
                  the Kubernetes name scoping to be mirrored within StorageOS for tighter
                  integration. Set VolumeName to any name to override the default behaviour.
                  Set to "default" if you are not using namespaces within StorageOS.
                  Namespaces that do not pre-exist within StorageOS will be created.
                  
              • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
                host machine
                
                Represents a vSphere volume resource.
                
                

                • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
                  operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
                  "ext4" if unspecified.
                  
                • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
                  StoragePolicyName.
                  
                • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
                  
                • volumePath (string) Path that identifies vSphere volume vmdk
                  
        • ttlSecondsAfterFinished (integer) ttlSecondsAfterFinished limits the lifetime of a Job that has finished
          execution (either Complete or Failed). If this field is set,
          ttlSecondsAfterFinished after the Job finishes, it is eligible to be
          automatically deleted. When the Job is being deleted, its lifecycle
          guarantees (e.g. finalizers) will be honored. If this field is unset, the
          Job won't be automatically deleted. If this field is set to zero, the Job
          becomes eligible to be deleted immediately after it finishes.
          
    • schedule (string) The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.
      
    • startingDeadlineSeconds (integer) Optional deadline in seconds for starting the job if it misses scheduled
      time for any reason. Missed jobs executions will be counted as failed ones.
      
    • successfulJobsHistoryLimit (integer) The number of successful finished jobs to retain. Value must be
      non-negative integer. Defaults to 3.
      
    • suspend (boolean) This flag tells the controller to suspend subsequent executions, it does
      not apply to already started executions. Defaults to false.
      
  • status (Object) Current status of a cron job. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    CronJobStatus represents the current state of a cron job.
    
    

    • active ([]Object) A list of pointers to currently running jobs.
      
      ObjectReference contains enough information to let you inspect or modify
      the referred object.
      
      

      • apiVersion (string) API version of the referent.
        
      • fieldPath (string) If referring to a piece of an object instead of an entire object, this
        string should contain a valid JSON/Go field access statement, such as
        desiredState.manifest.containers[2]. For example, if the object reference
        is to a container within a pod, this would take on a value like:
        "spec.containers{name}" (where "name" refers to the name of the container
        that triggered the event) or if no container name is specified
        "spec.containers[2]" (container with index 2 in this pod). This syntax is
        chosen only to have some well-defined way of referencing a part of an
        object.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
        
      • namespace (string) Namespace of the referent. More info:
        https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
        
      • resourceVersion (string) Specific resourceVersion to which this reference is made, if any. More
        info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
        
      • uid (string) UID of the referent. More info:
        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
        
    • lastScheduleTime (string) Information when was the last time the job was successfully scheduled.
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • lastSuccessfulTime (string) Information when was the last time the job successfully completed.
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
• Job Job represents the configuration of a single job.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Specification of the desired behavior of a job. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    JobSpec describes how the job execution will look like.
    
    

    • activeDeadlineSeconds (integer) Specifies the duration in seconds relative to the startTime that the job
      may be continuously active before the system tries to terminate it; value
      must be positive integer. If a Job is suspended (at creation or through an
      update), this timer will effectively be stopped and reset when the Job is
      resumed again.
      
    • backoffLimit (integer) Specifies the number of retries before marking this job failed. Defaults to
      6
      
    • completionMode (string) CompletionMode specifies how Pod completions are tracked. It can be
      `NonIndexed` (default) or `Indexed`.
      
      `NonIndexed` means that the Job is considered complete when there have been
      .spec.completions successfully completed Pods. Each Pod completion is
      homologous to each other.
      
      `Indexed` means that the Pods of a Job get an associated completion index
      from 0 to (.spec.completions - 1), available in the annotation
      batch.kubernetes.io/job-completion-index. The Job is considered complete
      when there is one successfully completed Pod for each index. When value is
      `Indexed`, .spec.completions must be specified and `.spec.parallelism` must
      be less than or equal to 10^5. In addition, The Pod name takes the form
      `$(job-name)-$(index)-$(random-string)`, the Pod hostname takes the form
      `$(job-name)-$(index)`.
      
      This field is beta-level. More completion modes can be added in the future.
      If the Job controller observes a mode that it doesn't recognize, the
      controller skips updates for the Job.
      
    • completions (integer) Specifies the desired number of successfully finished pods the job should
      be run with. Setting to nil means that the success of any pod signals the
      success of all pods, and allows parallelism to have any positive value.
      Setting to 1 means that parallelism is limited to 1 and the success of that
      pod signals the success of the job. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
      
    • manualSelector (boolean) manualSelector controls generation of pod labels and pod selectors. Leave
      `manualSelector` unset unless you are certain what you are doing. When
      false or unset, the system pick labels unique to this job and appends those
      labels to the pod template. When true, the user is responsible for picking
      unique labels and specifying the selector. Failure to pick a unique label
      may cause this and other jobs to not function correctly. However, You may
      see `manualSelector=true` in jobs that were created with the old
      `extensions/v1beta1` API. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/#specifying-your-own-pod-selector
      
    • parallelism (integer) Specifies the maximum desired number of pods the job should run at any
      given time. The actual number of pods running in steady state will be less
      than this number when ((.spec.completions - .status.successful) (
      .spec.parallelism), i.e. when the work left to do is less than max
      parallelism. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
      
    • selector (Object) A label query over pods that should match the pod count. Normally, the
      system sets this field for you. More info:
      https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
      
      A label selector is a label query over a set of resources. The result of
      matchLabels and matchExpressions are ANDed. An empty label selector matches
      all objects. A null label selector matches no objects.
      
      

      • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
        are ANDed.
        
        A label selector requirement is a selector that contains values, a key, and
        an operator that relates the key and values.
        
        

        • key (string) key is the label key that the selector applies to.
          
        • operator (string) operator represents a key's relationship to a set of values. Valid
          operators are In, NotIn, Exists and DoesNotExist.
          
        • values ([]string) values is an array of string values. If the operator is In or NotIn, the
          values array must be non-empty. If the operator is Exists or DoesNotExist,
          the values array must be empty. This array is replaced during a strategic
          merge patch.
          
      • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
        matchLabels map is equivalent to an element of matchExpressions, whose key
        field is "key", the operator is "In", and the values array contains only
        "value". The requirements are ANDed.
        
    • suspend (boolean) Suspend specifies whether the Job controller should create Pods or not. If
      a Job is created with suspend set to true, no Pods are created by the Job
      controller. If a Job is suspended after creation (i.e. the flag goes from
      false to true), the Job controller will delete all active Pods associated
      with this Job. Users must design their workload to gracefully handle this.
      Suspending a Job will reset the StartTime field of the Job, effectively
      resetting the ActiveDeadlineSeconds timer too. Defaults to false.
      
      This field is beta-level, gated by SuspendJob feature flag (enabled by
      default).
      
    • template (Object) Describes the pod that will be created when executing a job. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
      
      PodTemplateSpec describes the data a pod should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the pod. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        PodSpec is a description of a pod.
        
        

        • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
          StartTime before the system will actively try to mark it failed and kill
          associated containers. Value must be a positive integer.
          
        • affinity (Object) If specified, the pod's scheduling constraints
          
          Affinity is a group of affinity scheduling rules.
          
          

          • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
            
            Node affinity is a group of node affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node matches
              the corresponding matchExpressions; the node(s) with the highest sum are
              the most preferred.
              
              An empty preferred scheduling term matches all objects with implicit weight
              0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
              (i.e. is also a no-op).
              
              

              • preference (Object) A node selector term, associated with the corresponding weight.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
              • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to an update), the system may or may not try
              to eventually evict the pod from its node.
              
              A node selector represents the union of the results of one or more label
              queries over a set of nodes; that is, it represents the OR of the selectors
              represented by the node selector terms.
              
              

              • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
          • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
            same node, zone, etc. as some other pod(s)).
            
            Pod affinity is a group of inter pod affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node has pods
              which matches the corresponding podAffinityTerm; the node(s) with the
              highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to a pod label update), the system may or
              may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
          • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
            in the same node, zone, etc. as some other pod(s)).
            
            Pod anti affinity is a group of inter pod anti affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              anti-affinity expressions specified by this field, but it may choose a node
              that violates one or more of the expressions. The node that is most
              preferred is the one with the greatest sum of weights, i.e. for each node
              that meets all of the scheduling requirements (resource request,
              requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
              iterating through the elements of this field and adding "weight" to the sum
              if the node has pods which matches the corresponding podAffinityTerm; the
              node(s) with the highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              anti-affinity requirements specified by this field cease to be met at some
              point during pod execution (e.g. due to a pod label update), the system may
              or may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
        • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
          should be automatically mounted.
          
        • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
          added or removed. There must be at least one container in a Pod. Cannot be
          updated.
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
          merged to the generated DNS configuration based on DNSPolicy.
          
          PodDNSConfig defines the DNS parameters of a pod in addition to those
          generated from DNSPolicy.
          
          

          • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
            nameservers generated from DNSPolicy. Duplicated nameservers will be
            removed.
            
          • options ([]Object) A list of DNS resolver options. This will be merged with the base options
            generated from DNSPolicy. Duplicated entries will be removed. Resolution
            options given in Options will override those that appear in the base
            DNSPolicy.
            
            PodDNSConfigOption defines DNS resolver options of a pod.
            
            

            • name (string) Required.
              
            • value (string) (empty)
              
          • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
            the base search paths generated from DNSPolicy. Duplicated search paths
            will be removed.
            
        • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
          'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
          parameters given in DNSConfig will be merged with the policy selected with
          DNSPolicy. To have DNS options set along with hostNetwork, you have to
          specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
          
          
          
        • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
          injected into pod's environment variables, matching the syntax of Docker
          links. Optional: Defaults to true.
          
        • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
          run in an existing pod to perform user-initiated actions such as debugging.
          This list cannot be specified when creating a pod, and it cannot be
          modified by updating the pod spec. In order to add an ephemeral container
          to an existing pod, use the pod's ephemeralcontainers subresource. This
          field is beta-level and available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          An EphemeralContainer is a temporary container that you may add to an
          existing Pod for user-initiated activities such as debugging. Ephemeral
          containers have no resource or scheduling guarantees, and they will not be
          restarted when they exit or when a Pod is removed or restarted. The kubelet
          may evict a Pod if an ephemeral container causes the Pod to exceed its
          resource allocation.
          
          To add an ephemeral container, use the ephemeralcontainers subresource of
          an existing Pod. Ephemeral containers may not be removed or restarted.
          
          This is a beta feature available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
            unique among all containers, init containers and ephemeral containers.
            
          • ports ([]Object) Ports are not allowed for ephemeral containers.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
            use spare resources already allocated to the pod.
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
            container should be run with. If set, the fields of SecurityContext
            override the equivalent fields of PodSecurityContext.
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
            container targets. The ephemeral container will be run in the namespaces
            (IPC, PID, etc) of this container. If not set then the ephemeral container
            uses the namespaces configured in the Pod spec.
            
            The container runtime must implement support for this feature. If the
            runtime does not support namespace targeting then the result of setting
            this field is undefined.
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
            not allowed for ephemeral containers. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
          the pod's hosts file if specified. This is only valid for non-hostNetwork
          pods.
          
          HostAlias holds the mapping between IP and hostnames that will be injected
          as an entry in the pod's hosts file.
          
          

          • hostnames ([]string) Hostnames for the above IP address.
            
          • ip (string) IP address of the host file entry.
            
        • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
          
        • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
          If this option is set, the ports that will be used must be specified.
          Default to false.
          
        • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
          
        • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
          be set to a system-defined value.
          
        • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
          namespace to use for pulling any of the images used by this PodSpec. If
          specified, these secrets will be passed to individual puller
          implementations for them to use. For example, in the case of docker, only
          DockerConfig type secrets are honored. More info:
          https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
          executed in order prior to containers being started. If any init container
          fails, the pod is considered to have failed and is handled according to its
          restartPolicy. The name for an init container or normal container must be
          unique among all containers. Init containers may not have Lifecycle
          actions, Readiness probes, Liveness probes, or Startup probes. The
          resourceRequirements of an init container are taken into account during
          scheduling by finding the highest request/limit for each resource type, and
          then using the max of of that value or the sum of the normal containers.
          Limits are applied to init containers in a similar fashion. Init containers
          cannot currently be added or removed. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
          non-empty, the scheduler simply schedules this pod onto that node, assuming
          that it fits resource requirements.
          
        • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
          Selector which must match a node's labels for the pod to be scheduled on
          that node. More info:
          https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
          
        • os (Object) Specifies the OS of the containers in the pod. Some pod and container
          fields are restricted if this is set.
          
          If the OS field is set to linux, the following fields must be unset:
          -securityContext.windowsOptions
          
          If the OS field is set to windows, following fields must be unset: -
          spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
          spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
          spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
          spec.shareProcessNamespace - spec.securityContext.runAsUser -
          spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
          spec.containers[*].securityContext.seLinuxOptions -
          spec.containers[*].securityContext.seccompProfile -
          spec.containers[*].securityContext.capabilities -
          spec.containers[*].securityContext.readOnlyRootFilesystem -
          spec.containers[*].securityContext.privileged -
          spec.containers[*].securityContext.allowPrivilegeEscalation -
          spec.containers[*].securityContext.procMount -
          spec.containers[*].securityContext.runAsUser -
          spec.containers[*].securityContext.runAsGroup This is an alpha field and
          requires the IdentifyPodOS feature
          
          PodOS defines the OS parameters of a pod.
          
          

          • name (string) Name is the name of the operating system. The currently supported values
            are linux and windows. Additional value may be defined in future and can be
            one of:
            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
            Clients should expect to handle additional values and treat unrecognized
            values in this field as os: null
            
        • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
          a given RuntimeClass. This field will be autopopulated at admission time by
          the RuntimeClass admission controller. If the RuntimeClass admission
          controller is enabled, overhead must not be set in Pod create requests. The
          RuntimeClass admission controller will reject Pod create requests which
          have the overhead already set. If RuntimeClass is configured and selected
          in the PodSpec, Overhead will be set to the value defined in the
          corresponding RuntimeClass, otherwise it will remain unset and treated as
          zero. More info:
          https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
          This field is beta-level as of Kubernetes v1.18, and is only honored by
          servers that enable the PodOverhead feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
          of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
          This field is beta-level, gated by the NonPreemptingPriority feature-gate.
          
        • priority (integer) The priority value. Various system components use this field to find the
          priority of the pod. When Priority Admission Controller is enabled, it
          prevents users from setting this field. The admission controller populates
          this field from PriorityClassName. The higher the value, the higher the
          priority.
          
        • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
          "system-cluster-critical" are two special keywords which indicate the
          highest priorities with the former being the highest priority. Any other
          name must be defined by creating a PriorityClass object with that name. If
          not specified, the pod priority will be default or zero if there is no
          default.
          
        • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
          pod is ready when all its containers are ready AND all conditions specified
          in the readiness gates have status equal to "True" More info:
          https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
          
          PodReadinessGate contains the reference to a pod condition
          
          

          • conditionType (string) ConditionType refers to a condition in the pod's condition list with
            matching type.
            
            
            
        • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
          Never. Default to Always. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
          
          
          
        • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
          which should be used to run this pod. If no RuntimeClass resource matches
          the named class, the pod will not be run. If unset or empty, the "legacy"
          RuntimeClass will be used, which is an implicit class with an empty
          definition that uses the default runtime handler. More info:
          https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
          beta feature as of Kubernetes v1.14.
          
        • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
          specified, the pod will be dispatched by default scheduler.
          
        • securityContext (Object) SecurityContext holds pod-level security attributes and common container
          settings. Optional: Defaults to empty. See type description for default
          values of each field.
          
          PodSecurityContext holds pod-level security attributes and common container
          settings. Some fields are also present in container.securityContext. Field
          values of container.securityContext take precedence over field values of
          PodSecurityContext.
          
          

          • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
            volume types allow the Kubelet to change the ownership of that volume to be
            owned by the pod:
            
            1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
            created in the volume will be owned by FSGroup) 3. The permission bits are
            OR'd with rw-rw----
            
            If unset, the Kubelet will not modify the ownership and permissions of any
            volume. Note that this field cannot be set when spec.os.name is windows.
            
          • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
            of the volume before being exposed inside Pod. This field will only apply
            to volume types which support fsGroup based ownership(and permissions). It
            will have no effect on ephemeral volume types such as: secret, configmaps
            and emptydir. Valid values are "OnRootMismatch" and "Always". If not
            specified, "Always" is used. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence for that container.
            Note that this field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
            field cannot be set when spec.os.name is windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
            addition to the container's primary GID. If unspecified, no groups will be
            added to any container. Note that this field cannot be set when
            spec.os.name is windows.
            
          • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
            unsupported sysctls (by the container runtime) might fail to launch. Note
            that this field cannot be set when spec.os.name is windows.
            
            Sysctl defines a kernel parameter to be set
            
            

            • name (string) Name of a property to set
              
            • value (string) Value of a property to set
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options within a container's SecurityContext will be used. If set in
            both SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
          Deprecated: Use serviceAccountName instead.
          
        • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
          pod. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
          
        • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
          than the leaf name (the default). In Linux containers, this means setting
          the FQDN in the hostname field of the kernel (the nodename field of struct
          utsname). In Windows containers, this means setting the registry value of
          hostname for the registry key
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
          FQDN. If a pod does not have FQDN, this has no effect. Default to false.
          
        • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
          When this is set containers will be able to view and signal processes from
          other containers in the same pod, and the first process in each container
          will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
          be set. Optional: Default to false.
          
        • subdomain (string) If specified, the fully qualified Pod hostname will be
          "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
          specified, the pod will not have a domainname at all.
          
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
          decreased in delete request. Value must be non-negative integer. The value
          zero indicates stop immediately via the kill signal (no opportunity to shut
          down). If this value is nil, the default grace period will be used instead.
          The grace period is the duration in seconds after the processes running in
          the pod are sent a termination signal and the time when the processes are
          forcibly halted with a kill signal. Set this value longer than the expected
          cleanup time for your process. Defaults to 30 seconds.
          
        • tolerations ([]Object) If specified, the pod's tolerations.
          
          The pod this Toleration is attached to tolerates any taint that matches the
          triple (key,value,effect) using the matching operator (operator).
          
          

          • effect (string) Effect indicates the taint effect to match. Empty means match all taint
            effects. When specified, allowed values are NoSchedule, PreferNoSchedule
            and NoExecute.
            
            
            
          • key (string) Key is the taint key that the toleration applies to. Empty means match all
            taint keys. If the key is empty, operator must be Exists; this combination
            means to match all values and all keys.
            
          • operator (string) Operator represents a key's relationship to the value. Valid operators are
            Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
            value, so that a pod can tolerate all taints of a particular category.
            
            
            
          • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
            be of effect NoExecute, otherwise this field is ignored) tolerates the
            taint. By default, it is not set, which means tolerate the taint forever
            (do not evict). Zero and negative values will be treated as 0 (evict
            immediately) by the system.
            
          • value (string) Value is the taint value the toleration matches to. If the operator is
            Exists, the value should be empty, otherwise just a regular string.
            
        • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
          across topology domains. Scheduler will schedule pods in a way which abides
          by the constraints. All topologySpreadConstraints are ANDed.
          
          TopologySpreadConstraint specifies how to spread matching pods among the
          given topology.
          
          

          • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
            selector are counted to determine the number of pods in their corresponding
            topology domain.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
            When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
            difference between the number of matching pods in the target topology and
            the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
            and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
            zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
            to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
            ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
            incoming pod can be scheduled onto any zone. When
            `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
            topologies that satisfy it. It's a required field. Default value is 1 and 0
            is not allowed.
            
          • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
            key and identical values are considered to be in the same topology. We
            consider each (key, value) as a "bucket", and try to put balanced number of
            pods into each bucket. It's a required field.
            
          • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
            the spread constraint. - DoNotSchedule (default) tells the scheduler not to
            schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
            any location, but giving higher precedence to topologies that would help
            reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
            pod if and only if every possible node assignment for that pod would
            violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
            MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
            | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
            DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
            3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
            other words, the cluster can still be imbalanced, but scheduler won't make
            it *more* imbalanced. It's a required field.
            
            
            
        • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
          More info: https://kubernetes.io/docs/concepts/storage/volumes
          
          Volume represents a named volume in a pod that may be accessed by any
          container in the pod.
          
          

          • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
            Represents a Persistent Disk resource in AWS.
            An AWS EBS disk must exist before mounting to a container. The disk must
            also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
            mounted as read/write once. AWS EBS volumes support ownership management
            and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty).
              
            • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
              "true". If omitted, the default is "false". More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
              info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
          • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            

            • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
              
            • diskName (string) The Name of the data disk in the blob storage
              
            • diskURI (string) The URI the data disk in the blob storage
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
              single blob disk per storage account Managed: azure managed data disk (only
              in managed availability set). defaults to shared
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
          • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            

            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretName (string) the name of secret that contains Azure Storage Account Name and Key
              
            • shareName (string) Share Name
              
          • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
            
            Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
              is /
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
              /etc/ceph/user.secret More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
              default is empty. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) Optional: User is the rados user name, default is admin More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
          • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
            machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
            
            Represents a cinder volume resource in Openstack. A Cinder volume must
            exist before mounting to a container. The volume must also be in the same
            region as the kubelet. Cinder volumes support ownership management and
            SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
              be "ext4" if unspecified. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • secretRef (Object) Optional: points to a secret object containing parameters used to connect
              to OpenStack.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeID (string) volume id used to identify the volume in cinder. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
          • configMap (Object) ConfigMap represents a configMap that should populate this volume
            
            Adapts a ConfigMap into a volume.
            The contents of the target ConfigMap's Data field will be presented in a
            volume as files using the keys in the Data field as the file names, unless
            the items element is populated with specific mappings of keys to paths.
            ConfigMap volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
            handled by certain external CSI drivers (Beta feature).
            
            Represents a source location of a volume to mount, managed by an external
            CSI driver
            
            

            • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
              your admin for the correct name as registered in the cluster.
              
            • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
              empty value is passed to the associated CSI driver which will determine the
              default filesystem to apply.
              
            • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
              sensitive information to pass to the CSI driver to complete the CSI
              NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
              and may be empty if no secret is required. If the secret object contains
              more than one secret, all secret references are passed.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
              (read/write).
              
            • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
              CSI driver. Consult your driver's documentation for supported values.
              
          • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
            volume
            
            DownwardAPIVolumeSource represents a volume containing downward API info.
            Downward API volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
              mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) Items is a list of downward API volume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
            Represents an empty directory for a pod. Empty directory volumes support
            ownership management and SELinux relabeling.
            
            

            • medium (string) What type of storage medium should back this directory. The default is ""
              which means to use the node's default medium. Must be an empty string
              (default) or Memory. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              
            • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
              limit is also applicable for memory medium. The maximum usage on memory
              medium EmptyDir would be the minimum value between the SizeLimit specified
              here and the sum of memory limits of all containers in a pod. The default
              is nil which means that the limit is undefined. More info:
              http://kubernetes.io/docs/user-guide/volumes#emptydir
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
            The volume's lifecycle is tied to the pod that defines it - it will be
            created before the pod starts, and deleted when the pod is removed.
            
            Use this if: a) the volume is only needed while the pod runs, b) features
            of normal volumes like restoring from snapshot or capacity tracking are
            needed, c) the storage driver is specified through a storage class, and d)
            the storage driver supports dynamic volume provisioning through a
            PersistentVolumeClaim (see EphemeralVolumeSource for more information on
            the connection between this volume type and PersistentVolumeClaim).
            
            Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
            that persist for longer than the lifecycle of an individual pod.
            
            Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
            to be used that way - see the documentation of the driver for more
            information.
            
            A pod can use both types of ephemeral volumes and persistent volumes at the
            same time.
            
            Represents an ephemeral volume that is handled by a normal storage driver.
            
            

            • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
              in which this EphemeralVolumeSource is embedded will be the owner of the
              PVC, i.e. the PVC will be deleted together with the pod. The name of the
              PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
              from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
              if the concatenated name is not valid for a PVC (for example, too long).
              
              An existing PVC with that name that is not owned by the pod will *not* be
              used for the pod to avoid using an unrelated volume by mistake. Starting
              the pod is then blocked until the unrelated PVC is removed. If such a
              pre-created PVC is meant to be used by the pod, the PVC has to updated with
              an owner reference to the pod once the pod exists. Normally this should not
              be necessary, but it may be useful when manually reconstructing a broken
              cluster.
              
              This field is read-only and no changes will be made by Kubernetes to the
              PVC after it has been created.
              
              Required, must not be nil.
              
              PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
              objects as part of an EphemeralVolumeSource.
              
              

              • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                creating it. No other fields are allowed and will be rejected during
                validation.
                
                ObjectMeta is metadata that all persisted resources must have, which
                includes all objects users must create.
                
                

                • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                  may be set by external tools to store and retrieve arbitrary metadata. They
                  are not queryable and should be preserved when modifying objects. More
                  info: http://kubernetes.io/docs/user-guide/annotations
                  
                • clusterName (string) The name of the cluster which the object belongs to. This is used to
                  distinguish resources with same name and namespace in different clusters.
                  This field is not set anywhere right now and apiserver is going to ignore
                  it if set in create or update request.
                  
                • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                  object was created. It is not guaranteed to be set in happens-before order
                  across separate operations. Clients may not set this value. It is
                  represented in RFC3339 form and is in UTC.
                  
                  Populated by the system. Read-only. Null for lists. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                  will be removed from the system. Only set when deletionTimestamp is also
                  set. May only be shortened. Read-only.
                  
                • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                  deleted. This field is set by the server when a graceful deletion is
                  requested by the user, and is not directly settable by a client. The
                  resource is expected to be deleted (no longer visible from resource lists,
                  and not reachable by name) after the time in this field, once the
                  finalizers list is empty. As long as the finalizers list contains items,
                  deletion is blocked. Once the deletionTimestamp is set, this value may not
                  be unset or be set further into the future, although it may be shortened or
                  the resource may be deleted prior to this time. For example, a user may
                  request that a pod is deleted in 30 seconds. The Kubelet will react by
                  sending a graceful termination signal to the containers in the pod. After
                  that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                  to the container and after cleanup, remove the pod from the API. In the
                  presence of network partitions, this object may still exist after this
                  timestamp, until an administrator or automated process can determine the
                  resource is fully terminated. If not set, graceful deletion of the object
                  has not been requested.
                  
                  Populated by the system when a graceful deletion is requested. Read-only.
                  More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                  an identifier for the responsible component that will remove the entry from
                  the list. If the deletionTimestamp of the object is non-nil, entries in
                  this list can only be removed. Finalizers may be processed and removed in
                  any order. Order is NOT enforced because it introduces significant risk of
                  stuck finalizers. finalizers is a shared field, any actor with permission
                  can reorder it. If the finalizer list is processed in order, then this can
                  lead to a situation in which the component responsible for the first
                  finalizer in the list is waiting for a signal (field value, external
                  system, or other) produced by a component responsible for a finalizer later
                  in the list, resulting in a deadlock. Without enforced ordering finalizers
                  are free to order amongst themselves and are not vulnerable to ordering
                  changes in the list.
                  
                • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                  unique name ONLY IF the Name field has not been provided. If this field is
                  used, the name returned to the client will be different than the name
                  passed. This value will also be combined with a unique suffix. The provided
                  value has the same validation rules as the Name field, and may be truncated
                  by the length of the suffix required to make the value unique on the
                  server.
                  
                  If this field is specified and the generated name exists, the server will
                  NOT return a 409 - instead, it will either return 201 Created or 500 with
                  Reason ServerTimeout indicating a unique name could not be found in the
                  time allotted, and the client should retry (optionally after the time
                  indicated in the Retry-After header).
                  
                  Applied only if Name is not specified. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                  
                • generation (integer) A sequence number representing a specific generation of the desired state.
                  Populated by the system. Read-only.
                  
                • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                  (scope and select) objects. May match selectors of replication controllers
                  and services. More info: http://kubernetes.io/docs/user-guide/labels
                  
                • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                  managed by that workflow. This is mostly for internal housekeeping, and
                  users typically shouldn't need to set or understand this field. A workflow
                  can be the user's name, a controller's name, or the name of a specific
                  apply path like "ci-cd". The set of fields is always in the version that
                  the workflow used when modifying the object.
                  
                  ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                  the resource that the fieldset applies to.
                  
                  

                  • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                    to. The format is "group/version" just like the top-level APIVersion field.
                    It is necessary to track the version of a field set because it cannot be
                    automatically converted.
                    
                  • fieldsType (string) FieldsType is the discriminator for the different fields format and
                    version. There is currently only one possible value: "FieldsV1"
                    
                  • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                    type.
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                  • manager (string) Manager is an identifier of the workflow managing these fields.
                    
                  • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                    being created. The only valid values for this field are 'Apply' and
                    'Update'.
                    
                  • subresource (string) Subresource is the name of the subresource used to update that object, or
                    empty string if the object was updated through the main resource. The value
                    of this field is used to distinguish between managers, even if they share
                    the same name. For example, a status update will be distinct from a regular
                    update using the same manager name. Note that the APIVersion field is not
                    related to the Subresource field and it always corresponds to the version
                    of the main resource.
                    
                  • time (string) Time is timestamp of when these fields were set. It should always be empty
                    if Operation is 'Apply'
                    
                    Time is a wrapper around time.Time which supports correct marshaling to
                    YAML and JSON. Wrappers are provided for many of the factory methods that
                    the time package offers.
                    
                • name (string) Name must be unique within a namespace. Is required when creating
                  resources, although some resources may allow a client to request the
                  generation of an appropriate name automatically. Name is primarily intended
                  for creation idempotence and configuration definition. Cannot be updated.
                  More info: http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • namespace (string) Namespace defines the space within which each name must be unique. An empty
                  namespace is equivalent to the "default" namespace, but "default" is the
                  canonical representation. Not all objects are required to be scoped to a
                  namespace - the value of this field for those objects will be empty.
                  
                  Must be a DNS_LABEL. Cannot be updated. More info:
                  http://kubernetes.io/docs/user-guide/namespaces
                  
                • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                  been deleted, this object will be garbage collected. If this object is
                  managed by a controller, then an entry in this list will point to this
                  controller, with the controller field set to true. There cannot be more
                  than one managing controller.
                  
                  OwnerReference contains enough information to let you identify an owning
                  object. An owning object must be in the same namespace as the dependent, or
                  be cluster-scoped, so there is no namespace field.
                  
                  

                  • apiVersion (string) API version of the referent.
                    
                  • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                    owner cannot be deleted from the key-value store until this reference is
                    removed. Defaults to false. To set this field, a user needs "delete"
                    permission of the owner, otherwise 422 (Unprocessable Entity) will be
                    returned.
                    
                  • controller (boolean) If true, this reference points to the managing controller.
                    
                  • kind (string) Kind of the referent. More info:
                    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    
                  • name (string) Name of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#names
                    
                  • uid (string) UID of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#uids
                    
                • resourceVersion (string) An opaque value that represents the internal version of this object that
                  can be used by clients to determine when objects have changed. May be used
                  for optimistic concurrency, change detection, and the watch operation on a
                  resource or set of resources. Clients must treat these values as opaque and
                  passed unmodified back to the server. They may only be valid for a
                  particular resource or set of resources.
                  
                  Populated by the system. Read-only. Value must be treated as opaque by
                  clients and . More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                  
                • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                  Read-only.
                  
                  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                  the field is planned to be removed in 1.21 release.
                  
                • uid (string) UID is the unique in time and space value for this object. It is typically
                  generated by the server on successful creation of a resource and is not
                  allowed to change on PUT operations.
                  
                  Populated by the system. Read-only. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                copied unchanged into the PVC that gets created from this template. The
                same fields as in a PersistentVolumeClaim are also valid here.
                
                PersistentVolumeClaimSpec describes the common attributes of storage
                devices and allows a Source for provider-specific attributes
                
                

                • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                  info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                  
                • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                  object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                  (PersistentVolumeClaim) If the provisioner or an external controller can
                  support the specified data source, it will create a new volume based on the
                  contents of the specified data source. If the AnyVolumeDataSource feature
                  gate is enabled, this field will always have the same contents as the
                  DataSourceRef field.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                  non-empty volume is desired. This may be any local object from a non-empty
                  API group (non core object) or a PersistentVolumeClaim object. When this
                  field is specified, volume binding will only succeed if the type of the
                  specified object matches some installed volume populator or dynamic
                  provisioner. This field will replace the functionality of the DataSource
                  field and as such if both fields are non-empty, they must have the same
                  value. For backwards compatibility, both fields (DataSource and
                  DataSourceRef) will be set to the same value automatically if one of them
                  is empty and the other is non-empty. There are two important differences
                  between DataSource and DataSourceRef: * While DataSource only allows two
                  specific types of objects, DataSourceRef allows any non-core object, as
                  well as PersistentVolumeClaim objects.
                  * While DataSource ignores disallowed values (dropping them), DataSourceRef
                  preserves all values, and generates an error if a disallowed value is
                  specified. (Alpha) Using this field requires the AnyVolumeDataSource
                  feature gate to be enabled.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • resources (Object) Resources represents the minimum resources the volume should have. If
                  RecoverVolumeExpansionFailure feature is enabled users are allowed to
                  specify resource requirements that are lower than previous value but must
                  still be higher than capacity recorded in the status field of the claim.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                  
                  ResourceRequirements describes the compute resource requirements.
                  
                  

                  • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                    Requests is omitted for a container, it defaults to Limits if that is
                    explicitly specified, otherwise to an implementation-defined value. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                • selector (Object) A label query over volumes to consider for binding.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • storageClassName (string) Name of the StorageClass required by the claim. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                  
                • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                  Filesystem is implied when not included in claim spec.
                  
                • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                  claim.
                  
          • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
            machine and then exposed to the pod.
            
            Represents a Fibre Channel volume. Fibre Channel volumes can only be
            mounted as read/write once. Fibre Channel volumes support ownership
            management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • lun (integer) Optional: FC target lun number
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
              
            • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
              combination of targetWWNs and lun must be set, but not both simultaneously.
              
          • flexVolume (Object) FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            

            • driver (string) Driver is the name of the driver to use for this volume.
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
              on FlexVolume script.
              
            • options (map[string]string) Optional: Extra command options if any.
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
              information to pass to the plugin scripts. This may be empty if no secret
              object is specified. If the secret object contains more than one secret,
              all secrets are passed to the plugin scripts.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
          • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
            This depends on the Flocker control service being running
            
            Represents a Flocker volume mounted by the Flocker agent. One and only one
            of datasetName and datasetUUID should be set. Flocker volumes do not
            support ownership management or SELinux relabeling.
            
            

            • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
              should be considered as deprecated
              
            • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
              
          • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
            Represents a Persistent Disk resource in Google Compute Engine.
            A GCE PD must exist before mounting to a container. The disk must also be
            in the same GCE project and zone as the kubelet. A GCE PD can only be
            mounted as read/write once or read-only many times. GCE PDs support
            ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty). More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
          • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
            GitRepo is deprecated. To provision a container with a git repo, mount an
            EmptyDir into an InitContainer that clones the repo using git, then mount
            the EmptyDir into the Pod's container.
            
            Represents a volume that is populated with the contents of a git
            repository. Git repo volumes do not support ownership management. Git repo
            volumes support SELinux relabeling.
            
            DEPRECATED: GitRepo is deprecated. To provision a container with a git
            repo, mount an EmptyDir into an InitContainer that clones the repo using
            git, then mount the EmptyDir into the Pod's container.
            
            

            • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
              supplied, the volume directory will be the git repository. Otherwise, if
              specified, the volume will contain the git repository in the subdirectory
              with the given name.
              
            • repository (string) Repository URL
              
            • revision (string) Commit hash for the specified revision.
              
          • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
            
            Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
              info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • path (string) Path is the Glusterfs volume path. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
              permissions. Defaults to false. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
          • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
            that is directly exposed to the container. This is generally used for
            system agents or other privileged things that are allowed to see the host
            machine. Most containers will NOT need this. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
            Represents a host path mapped into a pod. Host path volumes do not support
            ownership management or SELinux relabeling.
            
            

            • path (string) Path of the directory on the host. If the path is a symlink, it will follow
              the link to the real path. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
            • type (string) Type for HostPath Volume Defaults to "" More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
          • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
            host machine and then exposed to the pod. More info:
            https://examples.k8s.io/volumes/iscsi/README.md
            
            Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
            once. ISCSI volumes support ownership management and SELinux relabeling.
            
            

            • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
              
            • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
              
            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
              
            • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
              iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
              name) will be created for the connection.
              
            • iqn (string) Target iSCSI Qualified Name.
              
            • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
              (tcp).
              
            • lun (integer) iSCSI Target Lun number.
              
            • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
              port is other than default (typically TCP ports 860 and 3260).
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false.
              
            • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
              is other than default (typically TCP ports 860 and 3260).
              
          • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
            Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
            not support ownership management or SELinux relabeling.
            
            

            • path (string) Path that is exported by the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
              permissions. Defaults to false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • server (string) Server is the hostname or IP address of the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
          • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
            PersistentVolumeClaim in the same namespace. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
            PersistentVolumeClaimVolumeSource references the user's PVC in the same
            namespace. This volume finds the bound PV and mounts that volume for the
            pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
            another type of volume that is owned by someone else (the system).
            
            

            • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
              the pod using this volume. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
              
            • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
              
          • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
            and mounted on kubelets host machine
            
            Represents a Photon Controller persistent disk resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • pdID (string) ID that identifies Photon Controller persistent disk
              
          • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
            kubelets host machine
            
            PortworxVolumeSource represents a Portworx volume resource.
            
            

            • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
              supported by the host operating system. Ex. "ext4", "xfs". Implicitly
              inferred to be "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • volumeID (string) VolumeID uniquely identifies a Portworx volume
              
          • projected (Object) Items for all in one resources secrets, configmaps, and downward API
            
            Represents a projected volume source
            
            

            • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Directories within the path are not affected by this
              setting. This might be in conflict with other options that affect the file
              mode, like fsGroup, and the result can be other mode bits set.
              
            • sources ([]Object) list of volume projections
              
              Projection that may be projected along with other supported volume types
              
              

              • configMap (Object) information about the configMap data to project
                
                Adapts a ConfigMap into a projected volume.
                The contents of the target ConfigMap's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names, unless the items element is populated with specific mappings of keys
                to paths. Note that this is identical to a configmap volume source without
                the default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • downwardAPI (Object) information about the downwardAPI data to project
                
                Represents downward API info for projecting into a projected volume. Note
                that this is identical to a downwardAPI volume source without the default
                mode.
                
                

                • items ([]Object) Items is a list of DownwardAPIVolume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • secret (Object) information about the secret data to project
                
                Adapts a secret into a projected volume.
                The contents of the target Secret's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names. Note that this is identical to a secret volume source without the
                default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
              • serviceAccountToken (Object) information about the serviceAccountToken data to project
                
                ServiceAccountTokenProjection represents a projected service account token
                volume. This projection can be used to insert a service account token into
                the pods runtime filesystem for use against APIs (Kubernetes API Server or
                otherwise).
                
                

                • audience (string) Audience is the intended audience of the token. A recipient of a token must
                  identify itself with an identifier specified in the audience of the token,
                  and otherwise should reject the token. The audience defaults to the
                  identifier of the apiserver.
                  
                • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                  account token. As the token approaches expiration, the kubelet volume
                  plugin will proactively rotate the service account token. The kubelet will
                  start trying to rotate the token if the token is older than 80 percent of
                  its time to live or if the token is older than 24 hours.Defaults to 1 hour
                  and must be at least 10 minutes.
                  
                • path (string) Path is the path relative to the mount point of the file to project the
                  token into.
                  
          • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
            
            Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
            volumes do not support ownership management or SELinux relabeling.
            
            

            • group (string) Group to map volume access to Default is no group
              
            • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
              permissions. Defaults to false.
              
            • registry (string) Registry represents a single or multiple Quobyte Registry services
              specified as a string as host:port pair (multiple entries are separated
              with commas) which acts as the central registry for volumes
              
            • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
              provisioned Quobyte volumes, value is set by the plugin
              
            • user (string) User to map volume access to Defaults to serivceaccount user
              
            • volume (string) Volume is a string that references an already created Quobyte volume by
              name.
              
          • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
            
            Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
            volumes support ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
              
            • image (string) The rados image name. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
              More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • monitors ([]string) A collection of Ceph monitors. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • pool (string) The rados pool name. Default is rbd. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
              overrides keyring. Default is nil. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) The rados user name. Default is admin. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
          • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
            Kubernetes nodes.
            
            ScaleIOVolumeSource represents a persistent ScaleIO volume
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
              
            • gateway (string) The host address of the ScaleIO API Gateway.
              
            • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
              information. If this is not provided, Login operation will fail.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
              
            • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
              ThinProvisioned. Default is ThinProvisioned.
              
            • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
              
            • system (string) The name of the storage system as configured in ScaleIO.
              
            • volumeName (string) The name of a volume already created in the ScaleIO system that is
              associated with this volume source.
              
          • secret (Object) Secret represents a secret that should populate this volume. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
            Adapts a Secret into a volume.
            The contents of the target Secret's Data field will be presented in a
            volume as files using the keys in the Data field as the file names. Secret
            volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • optional (boolean) Specify whether the Secret or its keys must be defined
              
            • secretName (string) Name of the secret in the pod's namespace to use. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#secret
              
          • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
            nodes.
            
            Represents a StorageOS persistent volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
              credentials. If not specified, default values will be attempted.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
              are only unique within a namespace.
              
            • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
              namespace is specified then the Pod's namespace will be used. This allows
              the Kubernetes name scoping to be mirrored within StorageOS for tighter
              integration. Set VolumeName to any name to override the default behaviour.
              Set to "default" if you are not using namespaces within StorageOS.
              Namespaces that do not pre-exist within StorageOS will be created.
              
          • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
            host machine
            
            Represents a vSphere volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
              StoragePolicyName.
              
            • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
              
            • volumePath (string) Path that identifies vSphere volume vmdk
              
    • ttlSecondsAfterFinished (integer) ttlSecondsAfterFinished limits the lifetime of a Job that has finished
      execution (either Complete or Failed). If this field is set,
      ttlSecondsAfterFinished after the Job finishes, it is eligible to be
      automatically deleted. When the Job is being deleted, its lifecycle
      guarantees (e.g. finalizers) will be honored. If this field is unset, the
      Job won't be automatically deleted. If this field is set to zero, the Job
      becomes eligible to be deleted immediately after it finishes.
      
  • status (Object) Current status of a job. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    JobStatus represents the current state of a Job.
    
    

    • active (integer) The number of pending and running pods.
      
    • completedIndexes (string) CompletedIndexes holds the completed indexes when .spec.completionMode =
      "Indexed" in a text format. The indexes are represented as decimal integers
      separated by commas. The numbers are listed in increasing order. Three or
      more consecutive numbers are compressed and represented by the first and
      last element of the series, separated by a hyphen. For example, if the
      completed indexes are 1, 3, 4, 5 and 7, they are represented as "1,3-5,7".
      
    • completionTime (string) Represents time when the job was completed. It is not guaranteed to be set
      in happens-before order across separate operations. It is represented in
      RFC3339 form and is in UTC. The completion time is only set when the job
      finishes successfully.
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • conditions ([]Object) The latest available observations of an object's current state. When a Job
      fails, one of the conditions will have type "Failed" and status true. When
      a Job is suspended, one of the conditions will have type "Suspended" and
      status true; when the Job is resumed, the status of this condition will
      become false. When a Job is completed, one of the conditions will have type
      "Complete" and status true. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
      
      JobCondition describes current state of a job.
      
      

      • lastProbeTime (string) Last time the condition was checked.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • lastTransitionTime (string) Last time the condition transit from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) Human readable message indicating details about last transition.
        
      • reason (string) (brief) reason for the condition's last transition.
        
      • status (string) Status of the condition, one of True, False, Unknown.
        
      • type (string) Type of job condition, Complete or Failed.
        
        
    • failed (integer) The number of pods which reached phase Failed.
      
    • ready (integer) The number of pods which have a Ready condition.
      This field is alpha-level. The job controller populates the field when the
      feature gate JobReadyPods is enabled (disabled by default).
      
    • startTime (string) Represents time when the job controller started processing a job. When a
      Job is created in the suspended state, this field is not set until the
      first time it is resumed. This field is reset every time a Job is resumed
      from suspension. It is represented in RFC3339 form and is in UTC.
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • succeeded (integer) The number of pods which reached phase Succeeded.
      
    • uncountedTerminatedPods (Object) UncountedTerminatedPods holds the UIDs of Pods that have terminated but the
      job controller hasn't yet accounted for in the status counters.
      
      The job controller creates pods with a finalizer. When a pod terminates
      (succeeded or failed), the controller does three steps to account for it in
      the job status: (1) Add the pod UID to the arrays in this field. (2) Remove
      the pod finalizer. (3) Remove the pod UID from the arrays while increasing
      the corresponding
      counter.
      
      This field is beta-level. The job controller only makes use of this field
      when the feature gate JobTrackingWithFinalizers is enabled (enabled by
      default). Old jobs might not be tracked using this field, in which case the
      field remains null.
      
      UncountedTerminatedPods holds UIDs of Pods that have terminated but haven't
      been accounted in Job status counters.
      
      

      • failed ([]string) Failed holds UIDs of failed Pods.
        
      • succeeded ([]string) Succeeded holds UIDs of succeeded Pods.
        
• HorizontalPodAutoscaler HorizontalPodAutoscaler is the configuration for a horizontal pod
  autoscaler, which automatically manages the replica count of any resource
  implementing the scale subresource based on the metrics specified.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) metadata is the standard object metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) spec is the specification for the behaviour of the autoscaler. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status.
    
    HorizontalPodAutoscalerSpec describes the desired functionality of the
    HorizontalPodAutoscaler.
    
    

    • behavior (Object) behavior configures the scaling behavior of the target in both Up and Down
      directions (scaleUp and scaleDown fields respectively). If not set, the
      default HPAScalingRules for scale up and scale down are used.
      
      HorizontalPodAutoscalerBehavior configures the scaling behavior of the
      target in both Up and Down directions (scaleUp and scaleDown fields
      respectively).
      
      

      • scaleDown (Object) scaleDown is scaling policy for scaling Down. If not set, the default value
        is to allow to scale down to minReplicas pods, with a 300 second
        stabilization window (i.e., the highest recommendation for the last 300sec
        is used).
        
        HPAScalingRules configures the scaling behavior for one direction. These
        Rules are applied after calculating DesiredReplicas from metrics for the
        HPA. They can limit the scaling velocity by specifying scaling policies.
        They can prevent flapping by specifying the stabilization window, so that
        the number of replicas is not set instantly, instead, the safest value from
        the stabilization window is chosen.
        
        

        • policies ([]Object) policies is a list of potential scaling polices which can be used during
          scaling. At least one policy must be specified, otherwise the
          HPAScalingRules will be discarded as invalid
          
          HPAScalingPolicy is a single policy which must hold true for a specified
          past interval.
          
          

          • periodSeconds (integer) PeriodSeconds specifies the window of time for which the policy should hold
            true. PeriodSeconds must be greater than zero and less than or equal to
            1800 (30 min).
            
          • type (string) Type is used to specify the scaling policy.
            
          • value (integer) Value contains the amount of change which is permitted by the policy. It
            must be greater than zero
            
        • selectPolicy (string) selectPolicy is used to specify which policy should be used. If not set,
          the default value Max is used.
          
        • stabilizationWindowSeconds (integer) StabilizationWindowSeconds is the number of seconds for which past
          recommendations should be considered while scaling up or scaling down.
          StabilizationWindowSeconds must be greater than or equal to zero and less
          than or equal to 3600 (one hour). If not set, use the default values: - For
          scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e.
          the stabilization window is 300 seconds long).
          
      • scaleUp (Object) scaleUp is scaling policy for scaling Up. If not set, the default value is
        the higher of:
        * increase no more than 4 pods per 60 seconds
        * double the number of pods per 60 seconds No stabilization is used.
        
        HPAScalingRules configures the scaling behavior for one direction. These
        Rules are applied after calculating DesiredReplicas from metrics for the
        HPA. They can limit the scaling velocity by specifying scaling policies.
        They can prevent flapping by specifying the stabilization window, so that
        the number of replicas is not set instantly, instead, the safest value from
        the stabilization window is chosen.
        
        

        • policies ([]Object) policies is a list of potential scaling polices which can be used during
          scaling. At least one policy must be specified, otherwise the
          HPAScalingRules will be discarded as invalid
          
          HPAScalingPolicy is a single policy which must hold true for a specified
          past interval.
          
          

          • periodSeconds (integer) PeriodSeconds specifies the window of time for which the policy should hold
            true. PeriodSeconds must be greater than zero and less than or equal to
            1800 (30 min).
            
          • type (string) Type is used to specify the scaling policy.
            
          • value (integer) Value contains the amount of change which is permitted by the policy. It
            must be greater than zero
            
        • selectPolicy (string) selectPolicy is used to specify which policy should be used. If not set,
          the default value Max is used.
          
        • stabilizationWindowSeconds (integer) StabilizationWindowSeconds is the number of seconds for which past
          recommendations should be considered while scaling up or scaling down.
          StabilizationWindowSeconds must be greater than or equal to zero and less
          than or equal to 3600 (one hour). If not set, use the default values: - For
          scale up: 0 (i.e. no stabilization is done). - For scale down: 300 (i.e.
          the stabilization window is 300 seconds long).
          
    • maxReplicas (integer) maxReplicas is the upper limit for the number of replicas to which the
      autoscaler can scale up. It cannot be less that minReplicas.
      
    • metrics ([]Object) metrics contains the specifications for which to use to calculate the
      desired replica count (the maximum replica count across all metrics will be
      used). The desired replica count is calculated multiplying the ratio
      between the target value and the current value by the current number of
      pods. Ergo, metrics used must decrease as the pod count is increased, and
      vice-versa. See the individual metric source types for more information
      about how each type of metric must respond. If not set, the default metric
      will be set to 80%!a(MISSING)verage CPU utilization.
      
      MetricSpec specifies how to scale based on a single metric (only `type` and
      one other matching field should be set at once).
      
      

      • containerResource (Object) containerResource refers to a resource metric (such as those specified in
        requests and limits) known to Kubernetes describing a single container in
        each pod of the current scale target (e.g. CPU or memory). Such metrics are
        built in to Kubernetes, and have special scaling options on top of those
        available to normal per-pod metrics using the "pods" source. This is an
        alpha feature and can be enabled by the HPAContainerMetrics feature flag.
        
        ContainerResourceMetricSource indicates how to scale on a resource metric
        known to Kubernetes, as specified in requests and limits, describing each
        pod in the current scale target (e.g. CPU or memory). The values will be
        averaged together before being compared to the target. Such metrics are
        built in to Kubernetes, and have special scaling options on top of those
        available to normal per-pod metrics using the "pods" source. Only one
        "target" type should be set.
        
        

        • container (string) container is the name of the container in the pods of the scaling target
          
        • name (string) name is the name of the resource in question.
          
        • target (Object) target specifies the target value for the given metric
          
          MetricTarget defines the target value, average value, or average
          utilization of a specific metric
          
          

          • averageUtilization (integer) averageUtilization is the target value of the average of the resource
            metric across all relevant pods, represented as a percentage of the
            requested value of the resource for the pods. Currently only valid for
            Resource metric source type
            
          • averageValue (string) averageValue is the target value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • type (string) type represents whether the metric type is Utilization, Value, or
            AverageValue
            
          • value (string) value is the target value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
      • external (Object) external refers to a global metric that is not associated with any
        Kubernetes object. It allows autoscaling based on information coming from
        components running outside of cluster (for example length of queue in cloud
        messaging service, or QPS from loadbalancer running outside of cluster).
        
        ExternalMetricSource indicates how to scale on a metric not associated with
        any Kubernetes object (for example length of queue in cloud messaging
        service, or QPS from loadbalancer running outside of cluster).
        
        

        • metric (Object) metric identifies the target metric by name and selector
          
          MetricIdentifier defines the name and optionally selector for a metric
          
          

          • name (string) name is the name of the given metric
            
          • selector (Object) selector is the string-encoded form of a standard kubernetes label selector
            for the given metric When set, it is passed as an additional parameter to
            the metrics server for more specific metrics scoping. When unset, just the
            metricName will be used to gather metrics.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
        • target (Object) target specifies the target value for the given metric
          
          MetricTarget defines the target value, average value, or average
          utilization of a specific metric
          
          

          • averageUtilization (integer) averageUtilization is the target value of the average of the resource
            metric across all relevant pods, represented as a percentage of the
            requested value of the resource for the pods. Currently only valid for
            Resource metric source type
            
          • averageValue (string) averageValue is the target value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • type (string) type represents whether the metric type is Utilization, Value, or
            AverageValue
            
          • value (string) value is the target value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
      • object (Object) object refers to a metric describing a single kubernetes object (for
        example, hits-per-second on an Ingress object).
        
        ObjectMetricSource indicates how to scale on a metric describing a
        kubernetes object (for example, hits-per-second on an Ingress object).
        
        

        • describedObject (Object) describedObject specifies the descriptions of a object,such as kind,name
          apiVersion
          
          CrossVersionObjectReference contains enough information to let you identify
          the referred resource.
          
          

          • apiVersion (string) API version of the referent
            
          • kind (string) Kind of the referent; More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
            
          • name (string) Name of the referent; More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
        • metric (Object) metric identifies the target metric by name and selector
          
          MetricIdentifier defines the name and optionally selector for a metric
          
          

          • name (string) name is the name of the given metric
            
          • selector (Object) selector is the string-encoded form of a standard kubernetes label selector
            for the given metric When set, it is passed as an additional parameter to
            the metrics server for more specific metrics scoping. When unset, just the
            metricName will be used to gather metrics.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
        • target (Object) target specifies the target value for the given metric
          
          MetricTarget defines the target value, average value, or average
          utilization of a specific metric
          
          

          • averageUtilization (integer) averageUtilization is the target value of the average of the resource
            metric across all relevant pods, represented as a percentage of the
            requested value of the resource for the pods. Currently only valid for
            Resource metric source type
            
          • averageValue (string) averageValue is the target value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • type (string) type represents whether the metric type is Utilization, Value, or
            AverageValue
            
          • value (string) value is the target value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
      • pods (Object) pods refers to a metric describing each pod in the current scale target
        (for example, transactions-processed-per-second). The values will be
        averaged together before being compared to the target value.
        
        PodsMetricSource indicates how to scale on a metric describing each pod in
        the current scale target (for example, transactions-processed-per-second).
        The values will be averaged together before being compared to the target
        value.
        
        

        • metric (Object) metric identifies the target metric by name and selector
          
          MetricIdentifier defines the name and optionally selector for a metric
          
          

          • name (string) name is the name of the given metric
            
          • selector (Object) selector is the string-encoded form of a standard kubernetes label selector
            for the given metric When set, it is passed as an additional parameter to
            the metrics server for more specific metrics scoping. When unset, just the
            metricName will be used to gather metrics.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
        • target (Object) target specifies the target value for the given metric
          
          MetricTarget defines the target value, average value, or average
          utilization of a specific metric
          
          

          • averageUtilization (integer) averageUtilization is the target value of the average of the resource
            metric across all relevant pods, represented as a percentage of the
            requested value of the resource for the pods. Currently only valid for
            Resource metric source type
            
          • averageValue (string) averageValue is the target value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • type (string) type represents whether the metric type is Utilization, Value, or
            AverageValue
            
          • value (string) value is the target value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
      • resource (Object) resource refers to a resource metric (such as those specified in requests
        and limits) known to Kubernetes describing each pod in the current scale
        target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and
        have special scaling options on top of those available to normal per-pod
        metrics using the "pods" source.
        
        ResourceMetricSource indicates how to scale on a resource metric known to
        Kubernetes, as specified in requests and limits, describing each pod in the
        current scale target (e.g. CPU or memory). The values will be averaged
        together before being compared to the target. Such metrics are built in to
        Kubernetes, and have special scaling options on top of those available to
        normal per-pod metrics using the "pods" source. Only one "target" type
        should be set.
        
        

        • name (string) name is the name of the resource in question.
          
        • target (Object) target specifies the target value for the given metric
          
          MetricTarget defines the target value, average value, or average
          utilization of a specific metric
          
          

          • averageUtilization (integer) averageUtilization is the target value of the average of the resource
            metric across all relevant pods, represented as a percentage of the
            requested value of the resource for the pods. Currently only valid for
            Resource metric source type
            
          • averageValue (string) averageValue is the target value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • type (string) type represents whether the metric type is Utilization, Value, or
            AverageValue
            
          • value (string) value is the target value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
      • type (string) type is the type of metric source. It should be one of "ContainerResource",
        "External", "Object", "Pods" or "Resource", each mapping to a matching
        field in the object. Note: "ContainerResource" type is available on when
        the feature-gate HPAContainerMetrics is enabled
        
    • minReplicas (integer) minReplicas is the lower limit for the number of replicas to which the
      autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to
      be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one
      Object or External metric is configured. Scaling is active as long as at
      least one metric value is available.
      
    • scaleTargetRef (Object) scaleTargetRef points to the target resource to scale, and is used to the
      pods for which metrics should be collected, as well as to actually change
      the replica count.
      
      CrossVersionObjectReference contains enough information to let you identify
      the referred resource.
      
      

      • apiVersion (string) API version of the referent
        
      • kind (string) Kind of the referent; More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
        
      • name (string) Name of the referent; More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
  • status (Object) status is the current information about the autoscaler.
    
    HorizontalPodAutoscalerStatus describes the current status of a horizontal
    pod autoscaler.
    
    

    • conditions ([]Object) conditions is the set of conditions required for this autoscaler to scale
      its target, and indicates whether or not those conditions are met.
      
      HorizontalPodAutoscalerCondition describes the state of a
      HorizontalPodAutoscaler at a certain point.
      
      

      • lastTransitionTime (string) lastTransitionTime is the last time the condition transitioned from one
        status to another
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) message is a human-readable explanation containing details about the
        transition
        
      • reason (string) reason is the reason for the condition's last transition.
        
      • status (string) status is the status of the condition (True, False, Unknown)
        
      • type (string) type describes the current condition
        
    • currentMetrics ([]Object) currentMetrics is the last read state of the metrics used by this
      autoscaler.
      
      MetricStatus describes the last-read state of a single metric.
      
      

      • containerResource (Object) container resource refers to a resource metric (such as those specified in
        requests and limits) known to Kubernetes describing a single container in
        each pod in the current scale target (e.g. CPU or memory). Such metrics are
        built in to Kubernetes, and have special scaling options on top of those
        available to normal per-pod metrics using the "pods" source.
        
        ContainerResourceMetricStatus indicates the current value of a resource
        metric known to Kubernetes, as specified in requests and limits, describing
        a single container in each pod in the current scale target (e.g. CPU or
        memory). Such metrics are built in to Kubernetes, and have special scaling
        options on top of those available to normal per-pod metrics using the
        "pods" source.
        
        

        • container (string) Container is the name of the container in the pods of the scaling target
          
        • current (Object) current contains the current value for the given metric
          
          MetricValueStatus holds the current value for a metric
          
          

          • averageUtilization (integer) currentAverageUtilization is the current value of the average of the
            resource metric across all relevant pods, represented as a percentage of
            the requested value of the resource for the pods.
            
          • averageValue (string) averageValue is the current value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • value (string) value is the current value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • name (string) Name is the name of the resource in question.
          
      • external (Object) external refers to a global metric that is not associated with any
        Kubernetes object. It allows autoscaling based on information coming from
        components running outside of cluster (for example length of queue in cloud
        messaging service, or QPS from loadbalancer running outside of cluster).
        
        ExternalMetricStatus indicates the current value of a global metric not
        associated with any Kubernetes object.
        
        

        • current (Object) current contains the current value for the given metric
          
          MetricValueStatus holds the current value for a metric
          
          

          • averageUtilization (integer) currentAverageUtilization is the current value of the average of the
            resource metric across all relevant pods, represented as a percentage of
            the requested value of the resource for the pods.
            
          • averageValue (string) averageValue is the current value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • value (string) value is the current value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • metric (Object) metric identifies the target metric by name and selector
          
          MetricIdentifier defines the name and optionally selector for a metric
          
          

          • name (string) name is the name of the given metric
            
          • selector (Object) selector is the string-encoded form of a standard kubernetes label selector
            for the given metric When set, it is passed as an additional parameter to
            the metrics server for more specific metrics scoping. When unset, just the
            metricName will be used to gather metrics.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
      • object (Object) object refers to a metric describing a single kubernetes object (for
        example, hits-per-second on an Ingress object).
        
        ObjectMetricStatus indicates the current value of a metric describing a
        kubernetes object (for example, hits-per-second on an Ingress object).
        
        

        • current (Object) current contains the current value for the given metric
          
          MetricValueStatus holds the current value for a metric
          
          

          • averageUtilization (integer) currentAverageUtilization is the current value of the average of the
            resource metric across all relevant pods, represented as a percentage of
            the requested value of the resource for the pods.
            
          • averageValue (string) averageValue is the current value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • value (string) value is the current value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • describedObject (Object) DescribedObject specifies the descriptions of a object,such as kind,name
          apiVersion
          
          CrossVersionObjectReference contains enough information to let you identify
          the referred resource.
          
          

          • apiVersion (string) API version of the referent
            
          • kind (string) Kind of the referent; More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds"
            
          • name (string) Name of the referent; More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
        • metric (Object) metric identifies the target metric by name and selector
          
          MetricIdentifier defines the name and optionally selector for a metric
          
          

          • name (string) name is the name of the given metric
            
          • selector (Object) selector is the string-encoded form of a standard kubernetes label selector
            for the given metric When set, it is passed as an additional parameter to
            the metrics server for more specific metrics scoping. When unset, just the
            metricName will be used to gather metrics.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
      • pods (Object) pods refers to a metric describing each pod in the current scale target
        (for example, transactions-processed-per-second). The values will be
        averaged together before being compared to the target value.
        
        PodsMetricStatus indicates the current value of a metric describing each
        pod in the current scale target (for example,
        transactions-processed-per-second).
        
        

        • current (Object) current contains the current value for the given metric
          
          MetricValueStatus holds the current value for a metric
          
          

          • averageUtilization (integer) currentAverageUtilization is the current value of the average of the
            resource metric across all relevant pods, represented as a percentage of
            the requested value of the resource for the pods.
            
          • averageValue (string) averageValue is the current value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • value (string) value is the current value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • metric (Object) metric identifies the target metric by name and selector
          
          MetricIdentifier defines the name and optionally selector for a metric
          
          

          • name (string) name is the name of the given metric
            
          • selector (Object) selector is the string-encoded form of a standard kubernetes label selector
            for the given metric When set, it is passed as an additional parameter to
            the metrics server for more specific metrics scoping. When unset, just the
            metricName will be used to gather metrics.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
      • resource (Object) resource refers to a resource metric (such as those specified in requests
        and limits) known to Kubernetes describing each pod in the current scale
        target (e.g. CPU or memory). Such metrics are built in to Kubernetes, and
        have special scaling options on top of those available to normal per-pod
        metrics using the "pods" source.
        
        ResourceMetricStatus indicates the current value of a resource metric known
        to Kubernetes, as specified in requests and limits, describing each pod in
        the current scale target (e.g. CPU or memory). Such metrics are built in to
        Kubernetes, and have special scaling options on top of those available to
        normal per-pod metrics using the "pods" source.
        
        

        • current (Object) current contains the current value for the given metric
          
          MetricValueStatus holds the current value for a metric
          
          

          • averageUtilization (integer) currentAverageUtilization is the current value of the average of the
            resource metric across all relevant pods, represented as a percentage of
            the requested value of the resource for the pods.
            
          • averageValue (string) averageValue is the current value of the average of the metric across all
            relevant pods (as a quantity)
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • value (string) value is the current value of the metric (as a quantity).
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • name (string) Name is the name of the resource in question.
          
      • type (string) type is the type of metric source. It will be one of "ContainerResource",
        "External", "Object", "Pods" or "Resource", each corresponds to a matching
        field in the object. Note: "ContainerResource" type is available on when
        the feature-gate HPAContainerMetrics is enabled
        
    • currentReplicas (integer) currentReplicas is current number of replicas of pods managed by this
      autoscaler, as last seen by the autoscaler.
      
    • desiredReplicas (integer) desiredReplicas is the desired number of replicas of pods managed by this
      autoscaler, as last calculated by the autoscaler.
      
    • lastScaleTime (string) lastScaleTime is the last time the HorizontalPodAutoscaler scaled the
      number of pods, used by the autoscaler to control how often the number of
      pods is changed.
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • observedGeneration (integer) observedGeneration is the most recent generation observed by this
      autoscaler.
      
• PodTemplate PodTemplate describes a template for creating copies of a predefined pod.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • template (Object) Template defines the pods that will be created from this pod template.
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    PodTemplateSpec describes the data a pod should have when created from a
    template
    
    

    • metadata (Object) Standard object's metadata. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      ObjectMeta is metadata that all persisted resources must have, which
      includes all objects users must create.
      
      

      • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
        may be set by external tools to store and retrieve arbitrary metadata. They
        are not queryable and should be preserved when modifying objects. More
        info: http://kubernetes.io/docs/user-guide/annotations
        
      • clusterName (string) The name of the cluster which the object belongs to. This is used to
        distinguish resources with same name and namespace in different clusters.
        This field is not set anywhere right now and apiserver is going to ignore
        it if set in create or update request.
        
      • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
        object was created. It is not guaranteed to be set in happens-before order
        across separate operations. Clients may not set this value. It is
        represented in RFC3339 form and is in UTC.
        
        Populated by the system. Read-only. Null for lists. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
        will be removed from the system. Only set when deletionTimestamp is also
        set. May only be shortened. Read-only.
        
      • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
        deleted. This field is set by the server when a graceful deletion is
        requested by the user, and is not directly settable by a client. The
        resource is expected to be deleted (no longer visible from resource lists,
        and not reachable by name) after the time in this field, once the
        finalizers list is empty. As long as the finalizers list contains items,
        deletion is blocked. Once the deletionTimestamp is set, this value may not
        be unset or be set further into the future, although it may be shortened or
        the resource may be deleted prior to this time. For example, a user may
        request that a pod is deleted in 30 seconds. The Kubelet will react by
        sending a graceful termination signal to the containers in the pod. After
        that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
        to the container and after cleanup, remove the pod from the API. In the
        presence of network partitions, this object may still exist after this
        timestamp, until an administrator or automated process can determine the
        resource is fully terminated. If not set, graceful deletion of the object
        has not been requested.
        
        Populated by the system when a graceful deletion is requested. Read-only.
        More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
        an identifier for the responsible component that will remove the entry from
        the list. If the deletionTimestamp of the object is non-nil, entries in
        this list can only be removed. Finalizers may be processed and removed in
        any order. Order is NOT enforced because it introduces significant risk of
        stuck finalizers. finalizers is a shared field, any actor with permission
        can reorder it. If the finalizer list is processed in order, then this can
        lead to a situation in which the component responsible for the first
        finalizer in the list is waiting for a signal (field value, external
        system, or other) produced by a component responsible for a finalizer later
        in the list, resulting in a deadlock. Without enforced ordering finalizers
        are free to order amongst themselves and are not vulnerable to ordering
        changes in the list.
        
      • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
        unique name ONLY IF the Name field has not been provided. If this field is
        used, the name returned to the client will be different than the name
        passed. This value will also be combined with a unique suffix. The provided
        value has the same validation rules as the Name field, and may be truncated
        by the length of the suffix required to make the value unique on the
        server.
        
        If this field is specified and the generated name exists, the server will
        NOT return a 409 - instead, it will either return 201 Created or 500 with
        Reason ServerTimeout indicating a unique name could not be found in the
        time allotted, and the client should retry (optionally after the time
        indicated in the Retry-After header).
        
        Applied only if Name is not specified. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
        
      • generation (integer) A sequence number representing a specific generation of the desired state.
        Populated by the system. Read-only.
        
      • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
        (scope and select) objects. May match selectors of replication controllers
        and services. More info: http://kubernetes.io/docs/user-guide/labels
        
      • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
        managed by that workflow. This is mostly for internal housekeeping, and
        users typically shouldn't need to set or understand this field. A workflow
        can be the user's name, a controller's name, or the name of a specific
        apply path like "ci-cd". The set of fields is always in the version that
        the workflow used when modifying the object.
        
        ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
        the resource that the fieldset applies to.
        
        

        • apiVersion (string) APIVersion defines the version of this resource that this field set applies
          to. The format is "group/version" just like the top-level APIVersion field.
          It is necessary to track the version of a field set because it cannot be
          automatically converted.
          
        • fieldsType (string) FieldsType is the discriminator for the different fields format and
          version. There is currently only one possible value: "FieldsV1"
          
        • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
          type.
          
          FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
          format.
          
          Each key is either a '.' representing the field itself, and will always map
          to an empty set, or a string representing a sub-field or item. The string
          will follow one of these four formats: 'f:(name)', where (name) is the name
          of a field in a struct, or key in a map 'v:(value)', where (value) is the
          exact json formatted value of a list item 'i:(index)', where (index) is
          position of a item in a list 'k:(keys)', where (keys) is a map of a list
          item's key fields to their unique values If a key maps to an empty Fields
          value, the field that key represents is part of the set.
          
          The exact format is defined in sigs.k8s.io/structured-merge-diff
          
          FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
          format.
          
          Each key is either a '.' representing the field itself, and will always map
          to an empty set, or a string representing a sub-field or item. The string
          will follow one of these four formats: 'f:(name)', where (name) is the name
          of a field in a struct, or key in a map 'v:(value)', where (value) is the
          exact json formatted value of a list item 'i:(index)', where (index) is
          position of a item in a list 'k:(keys)', where (keys) is a map of a list
          item's key fields to their unique values If a key maps to an empty Fields
          value, the field that key represents is part of the set.
          
          The exact format is defined in sigs.k8s.io/structured-merge-diff
          
        • manager (string) Manager is an identifier of the workflow managing these fields.
          
        • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
          being created. The only valid values for this field are 'Apply' and
          'Update'.
          
        • subresource (string) Subresource is the name of the subresource used to update that object, or
          empty string if the object was updated through the main resource. The value
          of this field is used to distinguish between managers, even if they share
          the same name. For example, a status update will be distinct from a regular
          update using the same manager name. Note that the APIVersion field is not
          related to the Subresource field and it always corresponds to the version
          of the main resource.
          
        • time (string) Time is timestamp of when these fields were set. It should always be empty
          if Operation is 'Apply'
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
      • name (string) Name must be unique within a namespace. Is required when creating
        resources, although some resources may allow a client to request the
        generation of an appropriate name automatically. Name is primarily intended
        for creation idempotence and configuration definition. Cannot be updated.
        More info: http://kubernetes.io/docs/user-guide/identifiers#names
        
      • namespace (string) Namespace defines the space within which each name must be unique. An empty
        namespace is equivalent to the "default" namespace, but "default" is the
        canonical representation. Not all objects are required to be scoped to a
        namespace - the value of this field for those objects will be empty.
        
        Must be a DNS_LABEL. Cannot be updated. More info:
        http://kubernetes.io/docs/user-guide/namespaces
        
      • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
        been deleted, this object will be garbage collected. If this object is
        managed by a controller, then an entry in this list will point to this
        controller, with the controller field set to true. There cannot be more
        than one managing controller.
        
        OwnerReference contains enough information to let you identify an owning
        object. An owning object must be in the same namespace as the dependent, or
        be cluster-scoped, so there is no namespace field.
        
        

        • apiVersion (string) API version of the referent.
          
        • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
          owner cannot be deleted from the key-value store until this reference is
          removed. Defaults to false. To set this field, a user needs "delete"
          permission of the owner, otherwise 422 (Unprocessable Entity) will be
          returned.
          
        • controller (boolean) If true, this reference points to the managing controller.
          
        • kind (string) Kind of the referent. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
          
        • name (string) Name of the referent. More info:
          http://kubernetes.io/docs/user-guide/identifiers#names
          
        • uid (string) UID of the referent. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • resourceVersion (string) An opaque value that represents the internal version of this object that
        can be used by clients to determine when objects have changed. May be used
        for optimistic concurrency, change detection, and the watch operation on a
        resource or set of resources. Clients must treat these values as opaque and
        passed unmodified back to the server. They may only be valid for a
        particular resource or set of resources.
        
        Populated by the system. Read-only. Value must be treated as opaque by
        clients and . More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
        
      • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
        Read-only.
        
        DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
        the field is planned to be removed in 1.21 release.
        
      • uid (string) UID is the unique in time and space value for this object. It is typically
        generated by the server on successful creation of a resource and is not
        allowed to change on PUT operations.
        
        Populated by the system. Read-only. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • spec (Object) Specification of the desired behavior of the pod. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
      
      PodSpec is a description of a pod.
      
      

      • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
        StartTime before the system will actively try to mark it failed and kill
        associated containers. Value must be a positive integer.
        
      • affinity (Object) If specified, the pod's scheduling constraints
        
        Affinity is a group of affinity scheduling rules.
        
        

        • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
          
          Node affinity is a group of node affinity scheduling rules.
          
          

          • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
            affinity expressions specified by this field, but it may choose a node that
            violates one or more of the expressions. The node that is most preferred is
            the one with the greatest sum of weights, i.e. for each node that meets all
            of the scheduling requirements (resource request, requiredDuringScheduling
            affinity expressions, etc.), compute a sum by iterating through the
            elements of this field and adding "weight" to the sum if the node matches
            the corresponding matchExpressions; the node(s) with the highest sum are
            the most preferred.
            
            An empty preferred scheduling term matches all objects with implicit weight
            0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
            (i.e. is also a no-op).
            
            

            • preference (Object) A node selector term, associated with the corresponding weight.
              
              A null or empty node selector term matches no objects. The requirements of
              them are ANDed. The TopologySelectorTerm type implements a subset of the
              NodeSelectorTerm.
              
              

              • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                
                A node selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) The label key that the selector applies to.
                  
                • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                  NotIn, Exists, DoesNotExist. Gt, and Lt.
                  
                  
                  
                • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                  must be non-empty. If the operator is Exists or DoesNotExist, the values
                  array must be empty. If the operator is Gt or Lt, the values array must
                  have a single element, which will be interpreted as an integer. This array
                  is replaced during a strategic merge patch.
                  
              • matchFields ([]Object) A list of node selector requirements by node's fields.
                
                A node selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) The label key that the selector applies to.
                  
                • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                  NotIn, Exists, DoesNotExist. Gt, and Lt.
                  
                  
                  
                • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                  must be non-empty. If the operator is Exists or DoesNotExist, the values
                  array must be empty. If the operator is Gt or Lt, the values array must
                  have a single element, which will be interpreted as an integer. This array
                  is replaced during a strategic merge patch.
                  
            • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
              range 1-100.
              
          • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
            scheduling time, the pod will not be scheduled onto the node. If the
            affinity requirements specified by this field cease to be met at some point
            during pod execution (e.g. due to an update), the system may or may not try
            to eventually evict the pod from its node.
            
            A node selector represents the union of the results of one or more label
            queries over a set of nodes; that is, it represents the OR of the selectors
            represented by the node selector terms.
            
            

            • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
              
              A null or empty node selector term matches no objects. The requirements of
              them are ANDed. The TopologySelectorTerm type implements a subset of the
              NodeSelectorTerm.
              
              

              • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                
                A node selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) The label key that the selector applies to.
                  
                • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                  NotIn, Exists, DoesNotExist. Gt, and Lt.
                  
                  
                  
                • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                  must be non-empty. If the operator is Exists or DoesNotExist, the values
                  array must be empty. If the operator is Gt or Lt, the values array must
                  have a single element, which will be interpreted as an integer. This array
                  is replaced during a strategic merge patch.
                  
              • matchFields ([]Object) A list of node selector requirements by node's fields.
                
                A node selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) The label key that the selector applies to.
                  
                • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                  NotIn, Exists, DoesNotExist. Gt, and Lt.
                  
                  
                  
                • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                  must be non-empty. If the operator is Exists or DoesNotExist, the values
                  array must be empty. If the operator is Gt or Lt, the values array must
                  have a single element, which will be interpreted as an integer. This array
                  is replaced during a strategic merge patch.
                  
        • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
          same node, zone, etc. as some other pod(s)).
          
          Pod affinity is a group of inter pod affinity scheduling rules.
          
          

          • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
            affinity expressions specified by this field, but it may choose a node that
            violates one or more of the expressions. The node that is most preferred is
            the one with the greatest sum of weights, i.e. for each node that meets all
            of the scheduling requirements (resource request, requiredDuringScheduling
            affinity expressions, etc.), compute a sum by iterating through the
            elements of this field and adding "weight" to the sum if the node has pods
            which matches the corresponding podAffinityTerm; the node(s) with the
            highest sum are the most preferred.
            
            The weights of all of the matched WeightedPodAffinityTerm fields are added
            per-node to find the most preferred node(s)
            
            

            • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
            • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
              range 1-100.
              
          • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
            scheduling time, the pod will not be scheduled onto the node. If the
            affinity requirements specified by this field cease to be met at some point
            during pod execution (e.g. due to a pod label update), the system may or
            may not try to eventually evict the pod from its node. When there are
            multiple elements, the lists of nodes corresponding to each podAffinityTerm
            are intersected, i.e. all terms must be satisfied.
            
            Defines a set of pods (namely those matching the labelSelector relative to
            the given namespace(s)) that this pod should be co-located (affinity) or
            not co-located (anti-affinity) with, where co-located is defined as running
            on a node whose value of the label with key (topologyKey) matches that of
            any node on which a pod of the set of pods is running
            
            

            • labelSelector (Object) A label query over a set of resources, in this case pods.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
              is applied to the union of the namespaces selected by this field and the
              ones listed in the namespaces field. null selector and null or empty
              namespaces list means "this pod's namespace". An empty selector ({})
              matches all namespaces. This field is beta-level and is only honored when
              PodAffinityNamespaceSelector feature is enabled.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
              to. The term is applied to the union of the namespaces listed in this field
              and the ones selected by namespaceSelector. null or empty namespaces list
              and null namespaceSelector means "this pod's namespace"
              
            • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
              with the pods matching the labelSelector in the specified namespaces, where
              co-located is defined as running on a node whose value of the label with
              key topologyKey matches that of any node on which any of the selected pods
              is running. Empty topologyKey is not allowed.
              
        • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
          in the same node, zone, etc. as some other pod(s)).
          
          Pod anti affinity is a group of inter pod anti affinity scheduling rules.
          
          

          • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
            anti-affinity expressions specified by this field, but it may choose a node
            that violates one or more of the expressions. The node that is most
            preferred is the one with the greatest sum of weights, i.e. for each node
            that meets all of the scheduling requirements (resource request,
            requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
            iterating through the elements of this field and adding "weight" to the sum
            if the node has pods which matches the corresponding podAffinityTerm; the
            node(s) with the highest sum are the most preferred.
            
            The weights of all of the matched WeightedPodAffinityTerm fields are added
            per-node to find the most preferred node(s)
            
            

            • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
            • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
              range 1-100.
              
          • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
            scheduling time, the pod will not be scheduled onto the node. If the
            anti-affinity requirements specified by this field cease to be met at some
            point during pod execution (e.g. due to a pod label update), the system may
            or may not try to eventually evict the pod from its node. When there are
            multiple elements, the lists of nodes corresponding to each podAffinityTerm
            are intersected, i.e. all terms must be satisfied.
            
            Defines a set of pods (namely those matching the labelSelector relative to
            the given namespace(s)) that this pod should be co-located (affinity) or
            not co-located (anti-affinity) with, where co-located is defined as running
            on a node whose value of the label with key (topologyKey) matches that of
            any node on which a pod of the set of pods is running
            
            

            • labelSelector (Object) A label query over a set of resources, in this case pods.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
              is applied to the union of the namespaces selected by this field and the
              ones listed in the namespaces field. null selector and null or empty
              namespaces list means "this pod's namespace". An empty selector ({})
              matches all namespaces. This field is beta-level and is only honored when
              PodAffinityNamespaceSelector feature is enabled.
              
              A label selector is a label query over a set of resources. The result of
              matchLabels and matchExpressions are ANDed. An empty label selector matches
              all objects. A null label selector matches no objects.
              
              

              • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                are ANDed.
                
                A label selector requirement is a selector that contains values, a key, and
                an operator that relates the key and values.
                
                

                • key (string) key is the label key that the selector applies to.
                  
                • operator (string) operator represents a key's relationship to a set of values. Valid
                  operators are In, NotIn, Exists and DoesNotExist.
                  
                • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                  values array must be non-empty. If the operator is Exists or DoesNotExist,
                  the values array must be empty. This array is replaced during a strategic
                  merge patch.
                  
              • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                matchLabels map is equivalent to an element of matchExpressions, whose key
                field is "key", the operator is "In", and the values array contains only
                "value". The requirements are ANDed.
                
            • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
              to. The term is applied to the union of the namespaces listed in this field
              and the ones selected by namespaceSelector. null or empty namespaces list
              and null namespaceSelector means "this pod's namespace"
              
            • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
              with the pods matching the labelSelector in the specified namespaces, where
              co-located is defined as running on a node whose value of the label with
              key topologyKey matches that of any node on which any of the selected pods
              is running. Empty topologyKey is not allowed.
              
      • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
        should be automatically mounted.
        
      • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
        added or removed. There must be at least one container in a Pod. Cannot be
        updated.
        
        A single application container that you want to run within a pod.
        
        

        • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
          provided. Variable references $(VAR_NAME) are expanded using the
          container's environment. If a variable cannot be resolved, the reference in
          the input string will be unchanged. Double $$ are reduced to a single $,
          which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
          produce the string literal "$(VAR_NAME)". Escaped references will never be
          expanded, regardless of whether the variable exists or not. Cannot be
          updated. More info:
          https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
          
        • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
          ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
          are expanded using the container's environment. If a variable cannot be
          resolved, the reference in the input string will be unchanged. Double $$
          are reduced to a single $, which allows for escaping the $(VAR_NAME)
          syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
          Escaped references will never be expanded, regardless of whether the
          variable exists or not. Cannot be updated. More info:
          https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
          
        • env ([]Object) List of environment variables to set in the container. Cannot be updated.
          
          EnvVar represents an environment variable present in a Container.
          
          

          • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
            
          • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
            environment variables in the container and any service environment
            variables. If a variable cannot be resolved, the reference in the input
            string will be unchanged. Double $$ are reduced to a single $, which allows
            for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
            string literal "$(VAR_NAME)". Escaped references will never be expanded,
            regardless of whether the variable exists or not. Defaults to "".
            
          • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
            empty.
            
            EnvVarSource represents a source for the value of an EnvVar.
            
            

            • configMapKeyRef (Object) Selects a key of a ConfigMap.
              
              Selects a key from a ConfigMap.
              
              

              • key (string) The key to select.
                
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap or its key must be defined
                
            • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
              `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
              spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
              
              ObjectFieldSelector selects an APIVersioned field of an object.
              
              

              • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                "v1".
                
              • fieldPath (string) Path of the field to select in the specified API version.
                
            • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
              (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
              requests.memory and requests.ephemeral-storage) are currently supported.
              
              ResourceFieldSelector represents container resources (cpu, memory) and
              their output format
              
              

              • containerName (string) Container name: required for volumes, optional for env vars
                
              • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                
                Quantity is a fixed-point representation of a number. It provides
                convenient marshaling/unmarshaling in JSON and YAML, in addition to
                String() and AsInt64() accessors.
                
                The serialization format is:
                
                (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                (signedNumber)
                
                No matter which of the three exponent forms is used, no quantity may
                represent a number greater than 2^63-1 in magnitude, nor may it have more
                than 3 decimal places. Numbers larger or more precise will be capped or
                rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                future if we require larger or smaller quantities.
                
                When a Quantity is parsed from a string, it will remember the type of
                suffix it had, and will use the same type again when it is serialized.
                
                Before serializing, Quantity will be put in "canonical form". This means
                that Exponent/suffix will be adjusted up or down (with a corresponding
                increase or decrease in Mantissa) such that:
                a. No precision is lost b. No fractional digits will be emitted c. The
                exponent (or suffix) is as large as possible. The sign will be omitted
                unless the number is negative.
                
                Examples:
                1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                
                Note that the quantity will NEVER be internally represented by a floating
                point number. That is the whole point of this exercise.
                
                Non-canonical values will still parse as long as they are well formed, but
                will be re-emitted in their canonical form. (So always use canonical form,
                or don't diff.)
                
                This format is intended to make it difficult to use these numbers without
                writing some sort of special handling code in the hopes that that will
                cause implementors to also use a fixed point implementation.
                
              • resource (string) Required: resource to select
                
            • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
              
              SecretKeySelector selects a key of a Secret.
              
              

              • key (string) The key of the secret to select from. Must be a valid secret key.
                
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret or its key must be defined
                
        • envFrom ([]Object) List of sources to populate environment variables in the container. The
          keys defined within a source must be a C_IDENTIFIER. All invalid keys will
          be reported as an event when the container is starting. When a key exists
          in multiple sources, the value associated with the last source will take
          precedence. Values defined by an Env with a duplicate key will take
          precedence. Cannot be updated.
          
          EnvFromSource represents the source of a set of ConfigMaps
          
          

          • configMapRef (Object) The ConfigMap to select from
            
            ConfigMapEnvSource selects a ConfigMap to populate the environment
            variables with.
            
            The contents of the target ConfigMap's Data field will represent the
            key-value pairs as environment variables.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap must be defined
              
          • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
            C_IDENTIFIER.
            
          • secretRef (Object) The Secret to select from
            
            SecretEnvSource selects a Secret to populate the environment variables
            with.
            
            The contents of the target Secret's Data field will represent the key-value
            pairs as environment variables.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret must be defined
              
        • image (string) Docker image name. More info:
          https://kubernetes.io/docs/concepts/containers/images This field is
          optional to allow higher level config management to default or override
          container images in workload controllers like Deployments and StatefulSets.
          
        • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
          if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
          More info:
          https://kubernetes.io/docs/concepts/containers/images#updating-images
          
          
          
        • lifecycle (Object) Actions that the management system should take in response to container
          lifecycle events. Cannot be updated.
          
          Lifecycle describes actions that the management system should take in
          response to container lifecycle events. For the PostStart and PreStop
          lifecycle handlers, management of the container blocks until the action is
          complete, unless the container process fails, in which case the handler is
          aborted.
          
          

          • postStart (Object) PostStart is called immediately after a container is created. If the
            handler fails, the container is terminated and restarted according to its
            restart policy. Other management of the container blocks until the hook
            completes. More info:
            https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
            
            LifecycleHandler defines a specific action that should be taken in a
            lifecycle hook. One and only one of the fields, except TCPSocket must be
            specified.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
              the backward compatibility. There are no validation of this field and
              lifecycle hooks will fail in runtime when tcp handler is specified.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
          • preStop (Object) PreStop is called immediately before a container is terminated due to an
            API request or management event such as liveness/startup probe failure,
            preemption, resource contention, etc. The handler is not called if the
            container crashes or exits. The Pod's termination grace period countdown
            begins before the PreStop hook is executed. Regardless of the outcome of
            the handler, the container will eventually terminate within the Pod's
            termination grace period (unless delayed by finalizers). Other management
            of the container blocks until the hook completes or until the termination
            grace period is reached. More info:
            https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
            
            LifecycleHandler defines a specific action that should be taken in a
            lifecycle hook. One and only one of the fields, except TCPSocket must be
            specified.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
              the backward compatibility. There are no validation of this field and
              lifecycle hooks will fail in runtime when tcp handler is specified.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
        • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
          probe fails. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
          must have a unique name (DNS_LABEL). Cannot be updated.
          
        • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
          system additional information about the network connections a container
          uses, but is primarily informational. Not specifying a port here DOES NOT
          prevent that port from being exposed. Any port which is listening on the
          default "0.0.0.0" address inside a container will be accessible from the
          network. Cannot be updated.
          
          ContainerPort represents a network port in a single container.
          
          

          • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
            number, 0 ( x ( 65536.
            
          • hostIP (string) What host IP to bind the external port to.
            
          • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
            port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
            ContainerPort. Most containers do not need this.
            
          • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
            named port in a pod must have a unique name. Name for the port that can be
            referred to by services.
            
          • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
            
            
        • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
          from service endpoints if the probe fails. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          ResourceRequirements describes the compute resource requirements.
          
          

          • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
            Requests is omitted for a container, it defaults to Limits if that is
            explicitly specified, otherwise to an implementation-defined value. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • securityContext (Object) SecurityContext defines the security options the container should be run
          with. If set, the fields of SecurityContext override the equivalent fields
          of PodSecurityContext. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
          
          SecurityContext holds security configuration that will be applied to a
          container. Some fields are present in both SecurityContext and
          PodSecurityContext. When both are set, the values in SecurityContext take
          precedence.
          
          

          • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
            privileges than its parent process. This bool directly controls if the
            no_new_privs flag will be set on the container process.
            AllowPrivilegeEscalation is true always when the container is: 1) run as
            Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
            spec.os.name is windows.
            
          • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
            default set of capabilities granted by the container runtime. Note that
            this field cannot be set when spec.os.name is windows.
            
            Adds and removes POSIX capabilities from running containers.
            
            

            • add ([]string) Added capabilities
              
            • drop ([]string) Removed capabilities
              
          • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
            essentially equivalent to root on the host. Defaults to false. Note that
            this field cannot be set when spec.os.name is windows.
            
          • procMount (string) procMount denotes the type of proc mount to use for the containers. The
            default is DefaultProcMount which uses the container runtime defaults for
            readonly paths and masked paths. This requires the ProcMountType feature
            flag to be enabled. Note that this field cannot be set when spec.os.name is
            windows.
            
          • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
            Note that this field cannot be set when spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in PodSecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
            the value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
            the value specified in SecurityContext takes precedence. Note that this
            field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in PodSecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
            provided at both the pod & container level, the container options override
            the pod options. Note that this field cannot be set when spec.os.name is
            windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options from the PodSecurityContext will be used. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
          specified, no other probes are executed until this completes successfully.
          If this probe fails, the Pod will be restarted, just as if the
          livenessProbe failed. This can be used to provide different probe
          parameters at the beginning of a Pod's lifecycle, when it might take a long
          time to load data or warm a cache, than during steady-state operation. This
          cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
          runtime. If this is not set, reads from stdin in the container will always
          result in EOF. Default is false.
          
        • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
          been opened by a single attach. When stdin is true the stdin stream will
          remain open across multiple attach sessions. If stdinOnce is set to true,
          stdin is opened on container start, is empty until the first client
          attaches to stdin, and then remains open and accepts data until the client
          disconnects, at which time stdin is closed and remains closed until the
          container is restarted. If this flag is false, a container processes that
          reads from stdin will never receive an EOF. Default is false
          
        • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
          message will be written is mounted into the container's filesystem. Message
          written is intended to be brief final status, such as an assertion failure
          message. Will be truncated by the node if greater than 4096 bytes. The
          total message length across all containers will be limited to 12kb.
          Defaults to /dev/termination-log. Cannot be updated.
          
        • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
          contents of terminationMessagePath to populate the container status message
          on both success and failure. FallbackToLogsOnError will use the last chunk
          of container log output if the termination message file is empty and the
          container exited with an error. The log output is limited to 2048 bytes or
          80 lines, whichever is smaller. Defaults to File. Cannot be updated.
          
          
          
        • tty (boolean) Whether this container should allocate a TTY for itself, also requires
          'stdin' to be true. Default is false.
          
        • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
          
          volumeDevice describes a mapping of a raw block device within a container.
          
          

          • devicePath (string) devicePath is the path inside of the container that the device will be
            mapped to.
            
          • name (string) name must match the name of a persistentVolumeClaim in the pod
            
        • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
          
          VolumeMount describes a mounting of a Volume within a container.
          
          

          • mountPath (string) Path within the container at which the volume should be mounted. Must not
            contain ':'.
            
          • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
            container and the other way around. When not set, MountPropagationNone is
            used. This field is beta in 1.10.
            
          • name (string) This must match the Name of a Volume.
            
          • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
            Defaults to false.
            
          • subPath (string) Path within the volume from which the container's volume should be mounted.
            Defaults to "" (volume's root).
            
          • subPathExpr (string) Expanded path within the volume from which the container's volume should be
            mounted. Behaves similarly to SubPath but environment variable references
            $(VAR_NAME) are expanded using the container's environment. Defaults to ""
            (volume's root). SubPathExpr and SubPath are mutually exclusive.
            
        • workingDir (string) Container's working directory. If not specified, the container runtime's
          default will be used, which might be configured in the container image.
          Cannot be updated.
          
      • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
        merged to the generated DNS configuration based on DNSPolicy.
        
        PodDNSConfig defines the DNS parameters of a pod in addition to those
        generated from DNSPolicy.
        
        

        • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
          nameservers generated from DNSPolicy. Duplicated nameservers will be
          removed.
          
        • options ([]Object) A list of DNS resolver options. This will be merged with the base options
          generated from DNSPolicy. Duplicated entries will be removed. Resolution
          options given in Options will override those that appear in the base
          DNSPolicy.
          
          PodDNSConfigOption defines DNS resolver options of a pod.
          
          

          • name (string) Required.
            
          • value (string) (empty)
            
        • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
          the base search paths generated from DNSPolicy. Duplicated search paths
          will be removed.
          
      • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
        'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
        parameters given in DNSConfig will be merged with the policy selected with
        DNSPolicy. To have DNS options set along with hostNetwork, you have to
        specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
        
        
        
      • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
        injected into pod's environment variables, matching the syntax of Docker
        links. Optional: Defaults to true.
        
      • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
        run in an existing pod to perform user-initiated actions such as debugging.
        This list cannot be specified when creating a pod, and it cannot be
        modified by updating the pod spec. In order to add an ephemeral container
        to an existing pod, use the pod's ephemeralcontainers subresource. This
        field is beta-level and available on clusters that haven't disabled the
        EphemeralContainers feature gate.
        
        An EphemeralContainer is a temporary container that you may add to an
        existing Pod for user-initiated activities such as debugging. Ephemeral
        containers have no resource or scheduling guarantees, and they will not be
        restarted when they exit or when a Pod is removed or restarted. The kubelet
        may evict a Pod if an ephemeral container causes the Pod to exceed its
        resource allocation.
        
        To add an ephemeral container, use the ephemeralcontainers subresource of
        an existing Pod. Ephemeral containers may not be removed or restarted.
        
        This is a beta feature available on clusters that haven't disabled the
        EphemeralContainers feature gate.
        
        

        • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
          provided. Variable references $(VAR_NAME) are expanded using the
          container's environment. If a variable cannot be resolved, the reference in
          the input string will be unchanged. Double $$ are reduced to a single $,
          which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
          produce the string literal "$(VAR_NAME)". Escaped references will never be
          expanded, regardless of whether the variable exists or not. Cannot be
          updated. More info:
          https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
          
        • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
          ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
          are expanded using the container's environment. If a variable cannot be
          resolved, the reference in the input string will be unchanged. Double $$
          are reduced to a single $, which allows for escaping the $(VAR_NAME)
          syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
          Escaped references will never be expanded, regardless of whether the
          variable exists or not. Cannot be updated. More info:
          https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
          
        • env ([]Object) List of environment variables to set in the container. Cannot be updated.
          
          EnvVar represents an environment variable present in a Container.
          
          

          • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
            
          • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
            environment variables in the container and any service environment
            variables. If a variable cannot be resolved, the reference in the input
            string will be unchanged. Double $$ are reduced to a single $, which allows
            for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
            string literal "$(VAR_NAME)". Escaped references will never be expanded,
            regardless of whether the variable exists or not. Defaults to "".
            
          • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
            empty.
            
            EnvVarSource represents a source for the value of an EnvVar.
            
            

            • configMapKeyRef (Object) Selects a key of a ConfigMap.
              
              Selects a key from a ConfigMap.
              
              

              • key (string) The key to select.
                
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap or its key must be defined
                
            • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
              `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
              spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
              
              ObjectFieldSelector selects an APIVersioned field of an object.
              
              

              • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                "v1".
                
              • fieldPath (string) Path of the field to select in the specified API version.
                
            • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
              (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
              requests.memory and requests.ephemeral-storage) are currently supported.
              
              ResourceFieldSelector represents container resources (cpu, memory) and
              their output format
              
              

              • containerName (string) Container name: required for volumes, optional for env vars
                
              • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                
                Quantity is a fixed-point representation of a number. It provides
                convenient marshaling/unmarshaling in JSON and YAML, in addition to
                String() and AsInt64() accessors.
                
                The serialization format is:
                
                (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                (signedNumber)
                
                No matter which of the three exponent forms is used, no quantity may
                represent a number greater than 2^63-1 in magnitude, nor may it have more
                than 3 decimal places. Numbers larger or more precise will be capped or
                rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                future if we require larger or smaller quantities.
                
                When a Quantity is parsed from a string, it will remember the type of
                suffix it had, and will use the same type again when it is serialized.
                
                Before serializing, Quantity will be put in "canonical form". This means
                that Exponent/suffix will be adjusted up or down (with a corresponding
                increase or decrease in Mantissa) such that:
                a. No precision is lost b. No fractional digits will be emitted c. The
                exponent (or suffix) is as large as possible. The sign will be omitted
                unless the number is negative.
                
                Examples:
                1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                
                Note that the quantity will NEVER be internally represented by a floating
                point number. That is the whole point of this exercise.
                
                Non-canonical values will still parse as long as they are well formed, but
                will be re-emitted in their canonical form. (So always use canonical form,
                or don't diff.)
                
                This format is intended to make it difficult to use these numbers without
                writing some sort of special handling code in the hopes that that will
                cause implementors to also use a fixed point implementation.
                
              • resource (string) Required: resource to select
                
            • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
              
              SecretKeySelector selects a key of a Secret.
              
              

              • key (string) The key of the secret to select from. Must be a valid secret key.
                
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret or its key must be defined
                
        • envFrom ([]Object) List of sources to populate environment variables in the container. The
          keys defined within a source must be a C_IDENTIFIER. All invalid keys will
          be reported as an event when the container is starting. When a key exists
          in multiple sources, the value associated with the last source will take
          precedence. Values defined by an Env with a duplicate key will take
          precedence. Cannot be updated.
          
          EnvFromSource represents the source of a set of ConfigMaps
          
          

          • configMapRef (Object) The ConfigMap to select from
            
            ConfigMapEnvSource selects a ConfigMap to populate the environment
            variables with.
            
            The contents of the target ConfigMap's Data field will represent the
            key-value pairs as environment variables.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap must be defined
              
          • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
            C_IDENTIFIER.
            
          • secretRef (Object) The Secret to select from
            
            SecretEnvSource selects a Secret to populate the environment variables
            with.
            
            The contents of the target Secret's Data field will represent the key-value
            pairs as environment variables.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret must be defined
              
        • image (string) Docker image name. More info:
          https://kubernetes.io/docs/concepts/containers/images
          
        • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
          if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
          More info:
          https://kubernetes.io/docs/concepts/containers/images#updating-images
          
          
          
        • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
          
          Lifecycle describes actions that the management system should take in
          response to container lifecycle events. For the PostStart and PreStop
          lifecycle handlers, management of the container blocks until the action is
          complete, unless the container process fails, in which case the handler is
          aborted.
          
          

          • postStart (Object) PostStart is called immediately after a container is created. If the
            handler fails, the container is terminated and restarted according to its
            restart policy. Other management of the container blocks until the hook
            completes. More info:
            https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
            
            LifecycleHandler defines a specific action that should be taken in a
            lifecycle hook. One and only one of the fields, except TCPSocket must be
            specified.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
              the backward compatibility. There are no validation of this field and
              lifecycle hooks will fail in runtime when tcp handler is specified.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
          • preStop (Object) PreStop is called immediately before a container is terminated due to an
            API request or management event such as liveness/startup probe failure,
            preemption, resource contention, etc. The handler is not called if the
            container crashes or exits. The Pod's termination grace period countdown
            begins before the PreStop hook is executed. Regardless of the outcome of
            the handler, the container will eventually terminate within the Pod's
            termination grace period (unless delayed by finalizers). Other management
            of the container blocks until the hook completes or until the termination
            grace period is reached. More info:
            https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
            
            LifecycleHandler defines a specific action that should be taken in a
            lifecycle hook. One and only one of the fields, except TCPSocket must be
            specified.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
              the backward compatibility. There are no validation of this field and
              lifecycle hooks will fail in runtime when tcp handler is specified.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
        • livenessProbe (Object) Probes are not allowed for ephemeral containers.
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
          unique among all containers, init containers and ephemeral containers.
          
        • ports ([]Object) Ports are not allowed for ephemeral containers.
          
          ContainerPort represents a network port in a single container.
          
          

          • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
            number, 0 ( x ( 65536.
            
          • hostIP (string) What host IP to bind the external port to.
            
          • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
            port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
            ContainerPort. Most containers do not need this.
            
          • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
            named port in a pod must have a unique name. Name for the port that can be
            referred to by services.
            
          • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
            
            
        • readinessProbe (Object) Probes are not allowed for ephemeral containers.
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
          use spare resources already allocated to the pod.
          
          ResourceRequirements describes the compute resource requirements.
          
          

          • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
            Requests is omitted for a container, it defaults to Limits if that is
            explicitly specified, otherwise to an implementation-defined value. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
          container should be run with. If set, the fields of SecurityContext
          override the equivalent fields of PodSecurityContext.
          
          SecurityContext holds security configuration that will be applied to a
          container. Some fields are present in both SecurityContext and
          PodSecurityContext. When both are set, the values in SecurityContext take
          precedence.
          
          

          • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
            privileges than its parent process. This bool directly controls if the
            no_new_privs flag will be set on the container process.
            AllowPrivilegeEscalation is true always when the container is: 1) run as
            Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
            spec.os.name is windows.
            
          • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
            default set of capabilities granted by the container runtime. Note that
            this field cannot be set when spec.os.name is windows.
            
            Adds and removes POSIX capabilities from running containers.
            
            

            • add ([]string) Added capabilities
              
            • drop ([]string) Removed capabilities
              
          • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
            essentially equivalent to root on the host. Defaults to false. Note that
            this field cannot be set when spec.os.name is windows.
            
          • procMount (string) procMount denotes the type of proc mount to use for the containers. The
            default is DefaultProcMount which uses the container runtime defaults for
            readonly paths and masked paths. This requires the ProcMountType feature
            flag to be enabled. Note that this field cannot be set when spec.os.name is
            windows.
            
          • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
            Note that this field cannot be set when spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in PodSecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
            the value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
            the value specified in SecurityContext takes precedence. Note that this
            field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in PodSecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
            provided at both the pod & container level, the container options override
            the pod options. Note that this field cannot be set when spec.os.name is
            windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options from the PodSecurityContext will be used. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • startupProbe (Object) Probes are not allowed for ephemeral containers.
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
          runtime. If this is not set, reads from stdin in the container will always
          result in EOF. Default is false.
          
        • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
          been opened by a single attach. When stdin is true the stdin stream will
          remain open across multiple attach sessions. If stdinOnce is set to true,
          stdin is opened on container start, is empty until the first client
          attaches to stdin, and then remains open and accepts data until the client
          disconnects, at which time stdin is closed and remains closed until the
          container is restarted. If this flag is false, a container processes that
          reads from stdin will never receive an EOF. Default is false
          
        • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
          container targets. The ephemeral container will be run in the namespaces
          (IPC, PID, etc) of this container. If not set then the ephemeral container
          uses the namespaces configured in the Pod spec.
          
          The container runtime must implement support for this feature. If the
          runtime does not support namespace targeting then the result of setting
          this field is undefined.
          
        • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
          message will be written is mounted into the container's filesystem. Message
          written is intended to be brief final status, such as an assertion failure
          message. Will be truncated by the node if greater than 4096 bytes. The
          total message length across all containers will be limited to 12kb.
          Defaults to /dev/termination-log. Cannot be updated.
          
        • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
          contents of terminationMessagePath to populate the container status message
          on both success and failure. FallbackToLogsOnError will use the last chunk
          of container log output if the termination message file is empty and the
          container exited with an error. The log output is limited to 2048 bytes or
          80 lines, whichever is smaller. Defaults to File. Cannot be updated.
          
          
          
        • tty (boolean) Whether this container should allocate a TTY for itself, also requires
          'stdin' to be true. Default is false.
          
        • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
          
          volumeDevice describes a mapping of a raw block device within a container.
          
          

          • devicePath (string) devicePath is the path inside of the container that the device will be
            mapped to.
            
          • name (string) name must match the name of a persistentVolumeClaim in the pod
            
        • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
          not allowed for ephemeral containers. Cannot be updated.
          
          VolumeMount describes a mounting of a Volume within a container.
          
          

          • mountPath (string) Path within the container at which the volume should be mounted. Must not
            contain ':'.
            
          • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
            container and the other way around. When not set, MountPropagationNone is
            used. This field is beta in 1.10.
            
          • name (string) This must match the Name of a Volume.
            
          • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
            Defaults to false.
            
          • subPath (string) Path within the volume from which the container's volume should be mounted.
            Defaults to "" (volume's root).
            
          • subPathExpr (string) Expanded path within the volume from which the container's volume should be
            mounted. Behaves similarly to SubPath but environment variable references
            $(VAR_NAME) are expanded using the container's environment. Defaults to ""
            (volume's root). SubPathExpr and SubPath are mutually exclusive.
            
        • workingDir (string) Container's working directory. If not specified, the container runtime's
          default will be used, which might be configured in the container image.
          Cannot be updated.
          
      • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
        the pod's hosts file if specified. This is only valid for non-hostNetwork
        pods.
        
        HostAlias holds the mapping between IP and hostnames that will be injected
        as an entry in the pod's hosts file.
        
        

        • hostnames ([]string) Hostnames for the above IP address.
          
        • ip (string) IP address of the host file entry.
          
      • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
        
      • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
        If this option is set, the ports that will be used must be specified.
        Default to false.
        
      • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
        
      • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
        be set to a system-defined value.
        
      • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
        namespace to use for pulling any of the images used by this PodSpec. If
        specified, these secrets will be passed to individual puller
        implementations for them to use. For example, in the case of docker, only
        DockerConfig type secrets are honored. More info:
        https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
        
        LocalObjectReference contains enough information to let you locate the
        referenced object inside the same namespace.
        
        

        • name (string) Name of the referent. More info:
          https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
          
      • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
        executed in order prior to containers being started. If any init container
        fails, the pod is considered to have failed and is handled according to its
        restartPolicy. The name for an init container or normal container must be
        unique among all containers. Init containers may not have Lifecycle
        actions, Readiness probes, Liveness probes, or Startup probes. The
        resourceRequirements of an init container are taken into account during
        scheduling by finding the highest request/limit for each resource type, and
        then using the max of of that value or the sum of the normal containers.
        Limits are applied to init containers in a similar fashion. Init containers
        cannot currently be added or removed. Cannot be updated. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
        
        A single application container that you want to run within a pod.
        
        

        • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
          provided. Variable references $(VAR_NAME) are expanded using the
          container's environment. If a variable cannot be resolved, the reference in
          the input string will be unchanged. Double $$ are reduced to a single $,
          which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
          produce the string literal "$(VAR_NAME)". Escaped references will never be
          expanded, regardless of whether the variable exists or not. Cannot be
          updated. More info:
          https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
          
        • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
          ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
          are expanded using the container's environment. If a variable cannot be
          resolved, the reference in the input string will be unchanged. Double $$
          are reduced to a single $, which allows for escaping the $(VAR_NAME)
          syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
          Escaped references will never be expanded, regardless of whether the
          variable exists or not. Cannot be updated. More info:
          https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
          
        • env ([]Object) List of environment variables to set in the container. Cannot be updated.
          
          EnvVar represents an environment variable present in a Container.
          
          

          • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
            
          • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
            environment variables in the container and any service environment
            variables. If a variable cannot be resolved, the reference in the input
            string will be unchanged. Double $$ are reduced to a single $, which allows
            for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
            string literal "$(VAR_NAME)". Escaped references will never be expanded,
            regardless of whether the variable exists or not. Defaults to "".
            
          • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
            empty.
            
            EnvVarSource represents a source for the value of an EnvVar.
            
            

            • configMapKeyRef (Object) Selects a key of a ConfigMap.
              
              Selects a key from a ConfigMap.
              
              

              • key (string) The key to select.
                
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap or its key must be defined
                
            • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
              `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
              spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
              
              ObjectFieldSelector selects an APIVersioned field of an object.
              
              

              • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                "v1".
                
              • fieldPath (string) Path of the field to select in the specified API version.
                
            • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
              (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
              requests.memory and requests.ephemeral-storage) are currently supported.
              
              ResourceFieldSelector represents container resources (cpu, memory) and
              their output format
              
              

              • containerName (string) Container name: required for volumes, optional for env vars
                
              • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                
                Quantity is a fixed-point representation of a number. It provides
                convenient marshaling/unmarshaling in JSON and YAML, in addition to
                String() and AsInt64() accessors.
                
                The serialization format is:
                
                (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                (signedNumber)
                
                No matter which of the three exponent forms is used, no quantity may
                represent a number greater than 2^63-1 in magnitude, nor may it have more
                than 3 decimal places. Numbers larger or more precise will be capped or
                rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                future if we require larger or smaller quantities.
                
                When a Quantity is parsed from a string, it will remember the type of
                suffix it had, and will use the same type again when it is serialized.
                
                Before serializing, Quantity will be put in "canonical form". This means
                that Exponent/suffix will be adjusted up or down (with a corresponding
                increase or decrease in Mantissa) such that:
                a. No precision is lost b. No fractional digits will be emitted c. The
                exponent (or suffix) is as large as possible. The sign will be omitted
                unless the number is negative.
                
                Examples:
                1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                
                Note that the quantity will NEVER be internally represented by a floating
                point number. That is the whole point of this exercise.
                
                Non-canonical values will still parse as long as they are well formed, but
                will be re-emitted in their canonical form. (So always use canonical form,
                or don't diff.)
                
                This format is intended to make it difficult to use these numbers without
                writing some sort of special handling code in the hopes that that will
                cause implementors to also use a fixed point implementation.
                
              • resource (string) Required: resource to select
                
            • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
              
              SecretKeySelector selects a key of a Secret.
              
              

              • key (string) The key of the secret to select from. Must be a valid secret key.
                
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret or its key must be defined
                
        • envFrom ([]Object) List of sources to populate environment variables in the container. The
          keys defined within a source must be a C_IDENTIFIER. All invalid keys will
          be reported as an event when the container is starting. When a key exists
          in multiple sources, the value associated with the last source will take
          precedence. Values defined by an Env with a duplicate key will take
          precedence. Cannot be updated.
          
          EnvFromSource represents the source of a set of ConfigMaps
          
          

          • configMapRef (Object) The ConfigMap to select from
            
            ConfigMapEnvSource selects a ConfigMap to populate the environment
            variables with.
            
            The contents of the target ConfigMap's Data field will represent the
            key-value pairs as environment variables.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap must be defined
              
          • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
            C_IDENTIFIER.
            
          • secretRef (Object) The Secret to select from
            
            SecretEnvSource selects a Secret to populate the environment variables
            with.
            
            The contents of the target Secret's Data field will represent the key-value
            pairs as environment variables.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the Secret must be defined
              
        • image (string) Docker image name. More info:
          https://kubernetes.io/docs/concepts/containers/images This field is
          optional to allow higher level config management to default or override
          container images in workload controllers like Deployments and StatefulSets.
          
        • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
          if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
          More info:
          https://kubernetes.io/docs/concepts/containers/images#updating-images
          
          
          
        • lifecycle (Object) Actions that the management system should take in response to container
          lifecycle events. Cannot be updated.
          
          Lifecycle describes actions that the management system should take in
          response to container lifecycle events. For the PostStart and PreStop
          lifecycle handlers, management of the container blocks until the action is
          complete, unless the container process fails, in which case the handler is
          aborted.
          
          

          • postStart (Object) PostStart is called immediately after a container is created. If the
            handler fails, the container is terminated and restarted according to its
            restart policy. Other management of the container blocks until the hook
            completes. More info:
            https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
            
            LifecycleHandler defines a specific action that should be taken in a
            lifecycle hook. One and only one of the fields, except TCPSocket must be
            specified.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
              the backward compatibility. There are no validation of this field and
              lifecycle hooks will fail in runtime when tcp handler is specified.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
          • preStop (Object) PreStop is called immediately before a container is terminated due to an
            API request or management event such as liveness/startup probe failure,
            preemption, resource contention, etc. The handler is not called if the
            container crashes or exits. The Pod's termination grace period countdown
            begins before the PreStop hook is executed. Regardless of the outcome of
            the handler, the container will eventually terminate within the Pod's
            termination grace period (unless delayed by finalizers). Other management
            of the container blocks until the hook completes or until the termination
            grace period is reached. More info:
            https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
            
            LifecycleHandler defines a specific action that should be taken in a
            lifecycle hook. One and only one of the fields, except TCPSocket must be
            specified.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
              the backward compatibility. There are no validation of this field and
              lifecycle hooks will fail in runtime when tcp handler is specified.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
        • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
          probe fails. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
          must have a unique name (DNS_LABEL). Cannot be updated.
          
        • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
          system additional information about the network connections a container
          uses, but is primarily informational. Not specifying a port here DOES NOT
          prevent that port from being exposed. Any port which is listening on the
          default "0.0.0.0" address inside a container will be accessible from the
          network. Cannot be updated.
          
          ContainerPort represents a network port in a single container.
          
          

          • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
            number, 0 ( x ( 65536.
            
          • hostIP (string) What host IP to bind the external port to.
            
          • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
            port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
            ContainerPort. Most containers do not need this.
            
          • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
            named port in a pod must have a unique name. Name for the port that can be
            referred to by services.
            
          • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
            
            
        • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
          from service endpoints if the probe fails. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
          
          ResourceRequirements describes the compute resource requirements.
          
          

          • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
          • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
            Requests is omitted for a container, it defaults to Limits if that is
            explicitly specified, otherwise to an implementation-defined value. More
            info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • securityContext (Object) SecurityContext defines the security options the container should be run
          with. If set, the fields of SecurityContext override the equivalent fields
          of PodSecurityContext. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
          
          SecurityContext holds security configuration that will be applied to a
          container. Some fields are present in both SecurityContext and
          PodSecurityContext. When both are set, the values in SecurityContext take
          precedence.
          
          

          • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
            privileges than its parent process. This bool directly controls if the
            no_new_privs flag will be set on the container process.
            AllowPrivilegeEscalation is true always when the container is: 1) run as
            Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
            spec.os.name is windows.
            
          • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
            default set of capabilities granted by the container runtime. Note that
            this field cannot be set when spec.os.name is windows.
            
            Adds and removes POSIX capabilities from running containers.
            
            

            • add ([]string) Added capabilities
              
            • drop ([]string) Removed capabilities
              
          • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
            essentially equivalent to root on the host. Defaults to false. Note that
            this field cannot be set when spec.os.name is windows.
            
          • procMount (string) procMount denotes the type of proc mount to use for the containers. The
            default is DefaultProcMount which uses the container runtime defaults for
            readonly paths and masked paths. This requires the ProcMountType feature
            flag to be enabled. Note that this field cannot be set when spec.os.name is
            windows.
            
          • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
            Note that this field cannot be set when spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in PodSecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
            the value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
            the value specified in SecurityContext takes precedence. Note that this
            field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in PodSecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
            provided at both the pod & container level, the container options override
            the pod options. Note that this field cannot be set when spec.os.name is
            windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options from the PodSecurityContext will be used. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
          specified, no other probes are executed until this completes successfully.
          If this probe fails, the Pod will be restarted, just as if the
          livenessProbe failed. This can be used to provide different probe
          parameters at the beginning of a Pod's lifecycle, when it might take a long
          time to load data or warm a cache, than during steady-state operation. This
          cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
          
          Probe describes a health check to be performed against a container to
          determine whether it is alive or ready to receive traffic.
          
          

          • exec (Object) Exec specifies the action to take.
            
            ExecAction describes a "run in container" action.
            
            

            • command ([]string) Command is the command line to execute inside the container, the working
              directory for the command is root ('/') in the container's filesystem. The
              command is simply exec'd, it is not run inside a shell, so traditional
              shell instructions ('|', etc) won't work. To use a shell, you need to
              explicitly call out to that shell. Exit status of 0 is treated as
              live/healthy and non-zero is unhealthy.
              
          • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
            having succeeded. Defaults to 3. Minimum value is 1.
            
          • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
            requires enabling GRPCContainerProbe feature gate.
            
            

            • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
              
            • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
              (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
              
              If this is not specified, the default behavior is defined by gRPC.
              
          • httpGet (Object) HTTPGet specifies the http request to perform.
            
            HTTPGetAction describes an action based on HTTP Get requests.
            
            

            • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
              "Host" in httpHeaders instead.
              
            • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
              
              HTTPHeader describes a custom header to be used in HTTP probes
              
              

              • name (string) The header field name
                
              • value (string) The header field value
                
            • path (string) Path to access on the HTTP server.
              
            • port (string) Name or number of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
            • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
              
              
          • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
            are initiated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
          • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
            value is 1.
            
          • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
            after having failed. Defaults to 1. Must be 1 for liveness and startup.
            Minimum value is 1.
            
          • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
            
            TCPSocketAction describes an action based on opening a socket
            
            

            • host (string) Optional: Host name to connect to, defaults to the pod IP.
              
            • port (string) Number or name of the port to access on the container. Number must be in
              the range 1 to 65535. Name must be an IANA_SVC_NAME.
              
              IntOrString is a type that can hold an int32 or a string. When used in JSON
              or YAML marshalling and unmarshalling, it produces or consumes the inner
              type. This allows you to have, for example, a JSON field that can accept a
              name or number.
              
          • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
            probe failure. The grace period is the duration in seconds after the
            processes running in the pod are sent a termination signal and the time
            when the processes are forcibly halted with a kill signal. Set this value
            longer than the expected cleanup time for your process. If this value is
            nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
            value overrides the value provided by the pod spec. Value must be
            non-negative integer. The value zero indicates stop immediately via the
            kill signal (no opportunity to shut down). This is a beta field and
            requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
            is 1. spec.terminationGracePeriodSeconds is used if unset.
            
          • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
            Minimum value is 1. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
        • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
          runtime. If this is not set, reads from stdin in the container will always
          result in EOF. Default is false.
          
        • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
          been opened by a single attach. When stdin is true the stdin stream will
          remain open across multiple attach sessions. If stdinOnce is set to true,
          stdin is opened on container start, is empty until the first client
          attaches to stdin, and then remains open and accepts data until the client
          disconnects, at which time stdin is closed and remains closed until the
          container is restarted. If this flag is false, a container processes that
          reads from stdin will never receive an EOF. Default is false
          
        • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
          message will be written is mounted into the container's filesystem. Message
          written is intended to be brief final status, such as an assertion failure
          message. Will be truncated by the node if greater than 4096 bytes. The
          total message length across all containers will be limited to 12kb.
          Defaults to /dev/termination-log. Cannot be updated.
          
        • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
          contents of terminationMessagePath to populate the container status message
          on both success and failure. FallbackToLogsOnError will use the last chunk
          of container log output if the termination message file is empty and the
          container exited with an error. The log output is limited to 2048 bytes or
          80 lines, whichever is smaller. Defaults to File. Cannot be updated.
          
          
          
        • tty (boolean) Whether this container should allocate a TTY for itself, also requires
          'stdin' to be true. Default is false.
          
        • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
          
          volumeDevice describes a mapping of a raw block device within a container.
          
          

          • devicePath (string) devicePath is the path inside of the container that the device will be
            mapped to.
            
          • name (string) name must match the name of a persistentVolumeClaim in the pod
            
        • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
          
          VolumeMount describes a mounting of a Volume within a container.
          
          

          • mountPath (string) Path within the container at which the volume should be mounted. Must not
            contain ':'.
            
          • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
            container and the other way around. When not set, MountPropagationNone is
            used. This field is beta in 1.10.
            
          • name (string) This must match the Name of a Volume.
            
          • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
            Defaults to false.
            
          • subPath (string) Path within the volume from which the container's volume should be mounted.
            Defaults to "" (volume's root).
            
          • subPathExpr (string) Expanded path within the volume from which the container's volume should be
            mounted. Behaves similarly to SubPath but environment variable references
            $(VAR_NAME) are expanded using the container's environment. Defaults to ""
            (volume's root). SubPathExpr and SubPath are mutually exclusive.
            
        • workingDir (string) Container's working directory. If not specified, the container runtime's
          default will be used, which might be configured in the container image.
          Cannot be updated.
          
      • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
        non-empty, the scheduler simply schedules this pod onto that node, assuming
        that it fits resource requirements.
        
      • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
        Selector which must match a node's labels for the pod to be scheduled on
        that node. More info:
        https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
        
      • os (Object) Specifies the OS of the containers in the pod. Some pod and container
        fields are restricted if this is set.
        
        If the OS field is set to linux, the following fields must be unset:
        -securityContext.windowsOptions
        
        If the OS field is set to windows, following fields must be unset: -
        spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
        spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
        spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
        spec.shareProcessNamespace - spec.securityContext.runAsUser -
        spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
        spec.containers[*].securityContext.seLinuxOptions -
        spec.containers[*].securityContext.seccompProfile -
        spec.containers[*].securityContext.capabilities -
        spec.containers[*].securityContext.readOnlyRootFilesystem -
        spec.containers[*].securityContext.privileged -
        spec.containers[*].securityContext.allowPrivilegeEscalation -
        spec.containers[*].securityContext.procMount -
        spec.containers[*].securityContext.runAsUser -
        spec.containers[*].securityContext.runAsGroup This is an alpha field and
        requires the IdentifyPodOS feature
        
        PodOS defines the OS parameters of a pod.
        
        

        • name (string) Name is the name of the operating system. The currently supported values
          are linux and windows. Additional value may be defined in future and can be
          one of:
          https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
          Clients should expect to handle additional values and treat unrecognized
          values in this field as os: null
          
      • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
        a given RuntimeClass. This field will be autopopulated at admission time by
        the RuntimeClass admission controller. If the RuntimeClass admission
        controller is enabled, overhead must not be set in Pod create requests. The
        RuntimeClass admission controller will reject Pod create requests which
        have the overhead already set. If RuntimeClass is configured and selected
        in the PodSpec, Overhead will be set to the value defined in the
        corresponding RuntimeClass, otherwise it will remain unset and treated as
        zero. More info:
        https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
        This field is beta-level as of Kubernetes v1.18, and is only honored by
        servers that enable the PodOverhead feature.
        
        Quantity is a fixed-point representation of a number. It provides
        convenient marshaling/unmarshaling in JSON and YAML, in addition to
        String() and AsInt64() accessors.
        
        The serialization format is:
        
        (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
        from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
        (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
        (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
        (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
        (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
        See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
        | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
        choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
        (signedNumber)
        
        No matter which of the three exponent forms is used, no quantity may
        represent a number greater than 2^63-1 in magnitude, nor may it have more
        than 3 decimal places. Numbers larger or more precise will be capped or
        rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
        future if we require larger or smaller quantities.
        
        When a Quantity is parsed from a string, it will remember the type of
        suffix it had, and will use the same type again when it is serialized.
        
        Before serializing, Quantity will be put in "canonical form". This means
        that Exponent/suffix will be adjusted up or down (with a corresponding
        increase or decrease in Mantissa) such that:
        a. No precision is lost b. No fractional digits will be emitted c. The
        exponent (or suffix) is as large as possible. The sign will be omitted
        unless the number is negative.
        
        Examples:
        1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
        
        Note that the quantity will NEVER be internally represented by a floating
        point number. That is the whole point of this exercise.
        
        Non-canonical values will still parse as long as they are well formed, but
        will be re-emitted in their canonical form. (So always use canonical form,
        or don't diff.)
        
        This format is intended to make it difficult to use these numbers without
        writing some sort of special handling code in the hopes that that will
        cause implementors to also use a fixed point implementation.
        
      • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
        of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
        This field is beta-level, gated by the NonPreemptingPriority feature-gate.
        
      • priority (integer) The priority value. Various system components use this field to find the
        priority of the pod. When Priority Admission Controller is enabled, it
        prevents users from setting this field. The admission controller populates
        this field from PriorityClassName. The higher the value, the higher the
        priority.
        
      • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
        "system-cluster-critical" are two special keywords which indicate the
        highest priorities with the former being the highest priority. Any other
        name must be defined by creating a PriorityClass object with that name. If
        not specified, the pod priority will be default or zero if there is no
        default.
        
      • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
        pod is ready when all its containers are ready AND all conditions specified
        in the readiness gates have status equal to "True" More info:
        https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
        
        PodReadinessGate contains the reference to a pod condition
        
        

        • conditionType (string) ConditionType refers to a condition in the pod's condition list with
          matching type.
          
          
          
      • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
        Never. Default to Always. More info:
        https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
        
        
        
      • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
        which should be used to run this pod. If no RuntimeClass resource matches
        the named class, the pod will not be run. If unset or empty, the "legacy"
        RuntimeClass will be used, which is an implicit class with an empty
        definition that uses the default runtime handler. More info:
        https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
        beta feature as of Kubernetes v1.14.
        
      • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
        specified, the pod will be dispatched by default scheduler.
        
      • securityContext (Object) SecurityContext holds pod-level security attributes and common container
        settings. Optional: Defaults to empty. See type description for default
        values of each field.
        
        PodSecurityContext holds pod-level security attributes and common container
        settings. Some fields are also present in container.securityContext. Field
        values of container.securityContext take precedence over field values of
        PodSecurityContext.
        
        

        • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
          volume types allow the Kubelet to change the ownership of that volume to be
          owned by the pod:
          
          1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
          created in the volume will be owned by FSGroup) 3. The permission bits are
          OR'd with rw-rw----
          
          If unset, the Kubelet will not modify the ownership and permissions of any
          volume. Note that this field cannot be set when spec.os.name is windows.
          
        • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
          of the volume before being exposed inside Pod. This field will only apply
          to volume types which support fsGroup based ownership(and permissions). It
          will have no effect on ephemeral volume types such as: secret, configmaps
          and emptydir. Valid values are "OnRootMismatch" and "Always". If not
          specified, "Always" is used. Note that this field cannot be set when
          spec.os.name is windows.
          
        • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
          default if unset. May also be set in SecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence for that container. Note that this field
          cannot be set when spec.os.name is windows.
          
        • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
          Kubelet will validate the image at runtime to ensure that it does not run
          as UID 0 (root) and fail to start the container if it does. If unset or
          false, no such validation will be performed. May also be set in
          SecurityContext. If set in both SecurityContext and PodSecurityContext, the
          value specified in SecurityContext takes precedence.
          
        • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
          specified in image metadata if unspecified. May also be set in
          SecurityContext. If set in both SecurityContext and PodSecurityContext, the
          value specified in SecurityContext takes precedence for that container.
          Note that this field cannot be set when spec.os.name is windows.
          
        • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
          container runtime will allocate a random SELinux context for each
          container. May also be set in SecurityContext. If set in both
          SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence for that container. Note that this field
          cannot be set when spec.os.name is windows.
          
          SELinuxOptions are the labels to be applied to the container
          
          

          • level (string) Level is SELinux level label that applies to the container.
            
          • role (string) Role is a SELinux role label that applies to the container.
            
          • type (string) Type is a SELinux type label that applies to the container.
            
          • user (string) User is a SELinux user label that applies to the container.
            
        • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
          field cannot be set when spec.os.name is windows.
          
          SeccompProfile defines a pod/container's seccomp profile settings. Only one
          profile source may be set.
          
          

          • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
            be used. The profile must be preconfigured on the node to work. Must be a
            descending path, relative to the kubelet's configured seccomp profile
            location. Must only be set if type is "Localhost".
            
          • type (string) type indicates which kind of seccomp profile will be applied. Valid options
            are:
            
            Localhost - a profile defined in a file on the node should be used.
            RuntimeDefault - the container runtime default profile should be used.
            Unconfined - no profile should be applied.
            
            
            
        • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
          addition to the container's primary GID. If unspecified, no groups will be
          added to any container. Note that this field cannot be set when
          spec.os.name is windows.
          
        • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
          unsupported sysctls (by the container runtime) might fail to launch. Note
          that this field cannot be set when spec.os.name is windows.
          
          Sysctl defines a kernel parameter to be set
          
          

          • name (string) Name of a property to set
            
          • value (string) Value of a property to set
            
        • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
          the options within a container's SecurityContext will be used. If set in
          both SecurityContext and PodSecurityContext, the value specified in
          SecurityContext takes precedence. Note that this field cannot be set when
          spec.os.name is linux.
          
          WindowsSecurityContextOptions contain Windows-specific options and
          credentials.
          
          

          • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
            (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
            the GMSA credential spec named by the GMSACredentialSpecName field.
            
          • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
            
          • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
            container. This field is alpha-level and will only be honored by components
            that enable the WindowsHostProcessContainers feature flag. Setting this
            field without the feature flag will result in errors when validating the
            Pod. All of a Pod's containers must have the same effective HostProcess
            value (it is not allowed to have a mix of HostProcess containers and
            non-HostProcess containers). In addition, if HostProcess is true then
            HostNetwork must also be set to true.
            
          • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
            Defaults to the user specified in image metadata if unspecified. May also
            be set in PodSecurityContext. If set in both SecurityContext and
            PodSecurityContext, the value specified in SecurityContext takes
            precedence.
            
      • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
        Deprecated: Use serviceAccountName instead.
        
      • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
        pod. More info:
        https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
        
      • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
        than the leaf name (the default). In Linux containers, this means setting
        the FQDN in the hostname field of the kernel (the nodename field of struct
        utsname). In Windows containers, this means setting the registry value of
        hostname for the registry key
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
        FQDN. If a pod does not have FQDN, this has no effect. Default to false.
        
      • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
        When this is set containers will be able to view and signal processes from
        other containers in the same pod, and the first process in each container
        will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
        be set. Optional: Default to false.
        
      • subdomain (string) If specified, the fully qualified Pod hostname will be
        "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
        specified, the pod will not have a domainname at all.
        
      • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
        decreased in delete request. Value must be non-negative integer. The value
        zero indicates stop immediately via the kill signal (no opportunity to shut
        down). If this value is nil, the default grace period will be used instead.
        The grace period is the duration in seconds after the processes running in
        the pod are sent a termination signal and the time when the processes are
        forcibly halted with a kill signal. Set this value longer than the expected
        cleanup time for your process. Defaults to 30 seconds.
        
      • tolerations ([]Object) If specified, the pod's tolerations.
        
        The pod this Toleration is attached to tolerates any taint that matches the
        triple (key,value,effect) using the matching operator (operator).
        
        

        • effect (string) Effect indicates the taint effect to match. Empty means match all taint
          effects. When specified, allowed values are NoSchedule, PreferNoSchedule
          and NoExecute.
          
          
          
        • key (string) Key is the taint key that the toleration applies to. Empty means match all
          taint keys. If the key is empty, operator must be Exists; this combination
          means to match all values and all keys.
          
        • operator (string) Operator represents a key's relationship to the value. Valid operators are
          Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
          value, so that a pod can tolerate all taints of a particular category.
          
          
          
        • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
          be of effect NoExecute, otherwise this field is ignored) tolerates the
          taint. By default, it is not set, which means tolerate the taint forever
          (do not evict). Zero and negative values will be treated as 0 (evict
          immediately) by the system.
          
        • value (string) Value is the taint value the toleration matches to. If the operator is
          Exists, the value should be empty, otherwise just a regular string.
          
      • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
        across topology domains. Scheduler will schedule pods in a way which abides
        by the constraints. All topologySpreadConstraints are ANDed.
        
        TopologySpreadConstraint specifies how to spread matching pods among the
        given topology.
        
        

        • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
          selector are counted to determine the number of pods in their corresponding
          topology domain.
          
          A label selector is a label query over a set of resources. The result of
          matchLabels and matchExpressions are ANDed. An empty label selector matches
          all objects. A null label selector matches no objects.
          
          

          • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
            are ANDed.
            
            A label selector requirement is a selector that contains values, a key, and
            an operator that relates the key and values.
            
            

            • key (string) key is the label key that the selector applies to.
              
            • operator (string) operator represents a key's relationship to a set of values. Valid
              operators are In, NotIn, Exists and DoesNotExist.
              
            • values ([]string) values is an array of string values. If the operator is In or NotIn, the
              values array must be non-empty. If the operator is Exists or DoesNotExist,
              the values array must be empty. This array is replaced during a strategic
              merge patch.
              
          • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
            matchLabels map is equivalent to an element of matchExpressions, whose key
            field is "key", the operator is "In", and the values array contains only
            "value". The requirements are ANDed.
            
        • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
          When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
          difference between the number of matching pods in the target topology and
          the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
          and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
          zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
          to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
          ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
          incoming pod can be scheduled onto any zone. When
          `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
          topologies that satisfy it. It's a required field. Default value is 1 and 0
          is not allowed.
          
        • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
          key and identical values are considered to be in the same topology. We
          consider each (key, value) as a "bucket", and try to put balanced number of
          pods into each bucket. It's a required field.
          
        • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
          the spread constraint. - DoNotSchedule (default) tells the scheduler not to
          schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
          any location, but giving higher precedence to topologies that would help
          reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
          pod if and only if every possible node assignment for that pod would
          violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
          MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
          | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
          DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
          3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
          other words, the cluster can still be imbalanced, but scheduler won't make
          it *more* imbalanced. It's a required field.
          
          
          
      • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
        More info: https://kubernetes.io/docs/concepts/storage/volumes
        
        Volume represents a named volume in a pod that may be accessed by any
        container in the pod.
        
        

        • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
          kubelet's host machine and then exposed to the pod. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
          
          Represents a Persistent Disk resource in AWS.
          An AWS EBS disk must exist before mounting to a container. The disk must
          also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
          mounted as read/write once. AWS EBS volumes support ownership management
          and SELinux relabeling.
          
          

          • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
            filesystem type is supported by the host operating system. Examples:
            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
            More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
          • partition (integer) The partition in the volume that you want to mount. If omitted, the default
            is to mount by volume name. Examples: For volume /dev/sda1, you specify the
            partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
            you can leave the property empty).
            
          • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
            "true". If omitted, the default is "false". More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
          • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
            info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
        • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
          the pod.
          
          AzureDisk represents an Azure Data Disk mount on the host and bind mount to
          the pod.
          
          

          • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
            
          • diskName (string) The Name of the data disk in the blob storage
            
          • diskURI (string) The URI the data disk in the blob storage
            
          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
            "ext4" if unspecified.
            
          • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
            single blob disk per storage account Managed: azure managed data disk (only
            in managed availability set). defaults to shared
            
          • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
            setting in VolumeMounts.
            
        • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
          to the pod.
          
          AzureFile represents an Azure File Service mount on the host and bind mount
          to the pod.
          
          

          • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
            setting in VolumeMounts.
            
          • secretName (string) the name of secret that contains Azure Storage Account Name and Key
            
          • shareName (string) Share Name
            
        • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
          
          Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
          volumes do not support ownership management or SELinux relabeling.
          
          

          • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
            https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
            
          • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
            is /
            
          • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
            ReadOnly setting in VolumeMounts. More info:
            https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
            
          • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
            /etc/ceph/user.secret More info:
            https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
            
          • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
            default is empty. More info:
            https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • user (string) Optional: User is the rados user name, default is admin More info:
            https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
            
        • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
          machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
          
          Represents a cinder volume resource in Openstack. A Cinder volume must
          exist before mounting to a container. The volume must also be in the same
          region as the kubelet. Cinder volumes support ownership management and
          SELinux relabeling.
          
          

          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
            be "ext4" if unspecified. More info:
            https://examples.k8s.io/mysql-cinder-pd/README.md
            
          • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
            ReadOnly setting in VolumeMounts. More info:
            https://examples.k8s.io/mysql-cinder-pd/README.md
            
          • secretRef (Object) Optional: points to a secret object containing parameters used to connect
            to OpenStack.
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • volumeID (string) volume id used to identify the volume in cinder. More info:
            https://examples.k8s.io/mysql-cinder-pd/README.md
            
        • configMap (Object) ConfigMap represents a configMap that should populate this volume
          
          Adapts a ConfigMap into a volume.
          The contents of the target ConfigMap's Data field will be presented in a
          volume as files using the keys in the Data field as the file names, unless
          the items element is populated with specific mappings of keys to paths.
          ConfigMap volumes support ownership management and SELinux relabeling.
          
          

          • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
            Must be an octal value between 0000 and 0777 or a decimal value between 0
            and 511. YAML accepts both octal and decimal values, JSON requires decimal
            values for mode bits. Defaults to 0644. Directories within the path are not
            affected by this setting. This might be in conflict with other options that
            affect the file mode, like fsGroup, and the result can be other mode bits
            set.
            
          • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
            ConfigMap will be projected into the volume as a file whose name is the key
            and content is the value. If specified, the listed keys will be projected
            into the specified paths, and unlisted keys will not be present. If a key
            is specified which is not present in the ConfigMap, the volume setup will
            error unless it is marked optional. Paths must be relative and may not
            contain the '..' path or start with '..'.
            
            Maps a string key to a path within a volume.
            
            

            • key (string) The key to project.
              
            • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
              value between 0000 and 0777 or a decimal value between 0 and 511. YAML
              accepts both octal and decimal values, JSON requires decimal values for
              mode bits. If not specified, the volume defaultMode will be used. This
              might be in conflict with other options that affect the file mode, like
              fsGroup, and the result can be other mode bits set.
              
            • path (string) The relative path of the file to map the key to. May not be an absolute
              path. May not contain the path element '..'. May not start with the string
              '..'.
              
          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • optional (boolean) Specify whether the ConfigMap or its keys must be defined
            
        • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
          handled by certain external CSI drivers (Beta feature).
          
          Represents a source location of a volume to mount, managed by an external
          CSI driver
          
          

          • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
            your admin for the correct name as registered in the cluster.
            
          • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
            empty value is passed to the associated CSI driver which will determine the
            default filesystem to apply.
            
          • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
            sensitive information to pass to the CSI driver to complete the CSI
            NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
            and may be empty if no secret is required. If the secret object contains
            more than one secret, all secret references are passed.
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
            (read/write).
            
          • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
            CSI driver. Consult your driver's documentation for supported values.
            
        • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
          volume
          
          DownwardAPIVolumeSource represents a volume containing downward API info.
          Downward API volumes support ownership management and SELinux relabeling.
          
          

          • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
            mode bits used to set permissions on created files by default. Must be an
            octal value between 0000 and 0777 or a decimal value between 0 and 511.
            YAML accepts both octal and decimal values, JSON requires decimal values
            for mode bits. Defaults to 0644. Directories within the path are not
            affected by this setting. This might be in conflict with other options that
            affect the file mode, like fsGroup, and the result can be other mode bits
            set.
            
          • items ([]Object) Items is a list of downward API volume file
            
            DownwardAPIVolumeFile represents information to create the file containing
            the pod field
            
            

            • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
              namespace are supported.
              
              ObjectFieldSelector selects an APIVersioned field of an object.
              
              

              • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                "v1".
                
              • fieldPath (string) Path of the field to select in the specified API version.
                
            • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
              value between 0000 and 0777 or a decimal value between 0 and 511. YAML
              accepts both octal and decimal values, JSON requires decimal values for
              mode bits. If not specified, the volume defaultMode will be used. This
              might be in conflict with other options that affect the file mode, like
              fsGroup, and the result can be other mode bits set.
              
            • path (string) Required: Path is the relative path name of the file to be created. Must
              not be absolute or contain the '..' path. Must be utf-8 encoded. The first
              item of the relative path must not start with '..'
              
            • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
              (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
              supported.
              
              ResourceFieldSelector represents container resources (cpu, memory) and
              their output format
              
              

              • containerName (string) Container name: required for volumes, optional for env vars
                
              • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                
                Quantity is a fixed-point representation of a number. It provides
                convenient marshaling/unmarshaling in JSON and YAML, in addition to
                String() and AsInt64() accessors.
                
                The serialization format is:
                
                (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                (signedNumber)
                
                No matter which of the three exponent forms is used, no quantity may
                represent a number greater than 2^63-1 in magnitude, nor may it have more
                than 3 decimal places. Numbers larger or more precise will be capped or
                rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                future if we require larger or smaller quantities.
                
                When a Quantity is parsed from a string, it will remember the type of
                suffix it had, and will use the same type again when it is serialized.
                
                Before serializing, Quantity will be put in "canonical form". This means
                that Exponent/suffix will be adjusted up or down (with a corresponding
                increase or decrease in Mantissa) such that:
                a. No precision is lost b. No fractional digits will be emitted c. The
                exponent (or suffix) is as large as possible. The sign will be omitted
                unless the number is negative.
                
                Examples:
                1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                
                Note that the quantity will NEVER be internally represented by a floating
                point number. That is the whole point of this exercise.
                
                Non-canonical values will still parse as long as they are well formed, but
                will be re-emitted in their canonical form. (So always use canonical form,
                or don't diff.)
                
                This format is intended to make it difficult to use these numbers without
                writing some sort of special handling code in the hopes that that will
                cause implementors to also use a fixed point implementation.
                
              • resource (string) Required: resource to select
                
        • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
          More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
          
          Represents an empty directory for a pod. Empty directory volumes support
          ownership management and SELinux relabeling.
          
          

          • medium (string) What type of storage medium should back this directory. The default is ""
            which means to use the node's default medium. Must be an empty string
            (default) or Memory. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
          • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
            limit is also applicable for memory medium. The maximum usage on memory
            medium EmptyDir would be the minimum value between the SizeLimit specified
            here and the sum of memory limits of all containers in a pod. The default
            is nil which means that the limit is undefined. More info:
            http://kubernetes.io/docs/user-guide/volumes#emptydir
            
            Quantity is a fixed-point representation of a number. It provides
            convenient marshaling/unmarshaling in JSON and YAML, in addition to
            String() and AsInt64() accessors.
            
            The serialization format is:
            
            (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
            from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
            (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
            (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
            (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
            (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
            See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
            | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
            choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
            (signedNumber)
            
            No matter which of the three exponent forms is used, no quantity may
            represent a number greater than 2^63-1 in magnitude, nor may it have more
            than 3 decimal places. Numbers larger or more precise will be capped or
            rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
            future if we require larger or smaller quantities.
            
            When a Quantity is parsed from a string, it will remember the type of
            suffix it had, and will use the same type again when it is serialized.
            
            Before serializing, Quantity will be put in "canonical form". This means
            that Exponent/suffix will be adjusted up or down (with a corresponding
            increase or decrease in Mantissa) such that:
            a. No precision is lost b. No fractional digits will be emitted c. The
            exponent (or suffix) is as large as possible. The sign will be omitted
            unless the number is negative.
            
            Examples:
            1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
            
            Note that the quantity will NEVER be internally represented by a floating
            point number. That is the whole point of this exercise.
            
            Non-canonical values will still parse as long as they are well formed, but
            will be re-emitted in their canonical form. (So always use canonical form,
            or don't diff.)
            
            This format is intended to make it difficult to use these numbers without
            writing some sort of special handling code in the hopes that that will
            cause implementors to also use a fixed point implementation.
            
        • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
          The volume's lifecycle is tied to the pod that defines it - it will be
          created before the pod starts, and deleted when the pod is removed.
          
          Use this if: a) the volume is only needed while the pod runs, b) features
          of normal volumes like restoring from snapshot or capacity tracking are
          needed, c) the storage driver is specified through a storage class, and d)
          the storage driver supports dynamic volume provisioning through a
          PersistentVolumeClaim (see EphemeralVolumeSource for more information on
          the connection between this volume type and PersistentVolumeClaim).
          
          Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
          that persist for longer than the lifecycle of an individual pod.
          
          Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
          to be used that way - see the documentation of the driver for more
          information.
          
          A pod can use both types of ephemeral volumes and persistent volumes at the
          same time.
          
          Represents an ephemeral volume that is handled by a normal storage driver.
          
          

          • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
            in which this EphemeralVolumeSource is embedded will be the owner of the
            PVC, i.e. the PVC will be deleted together with the pod. The name of the
            PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
            from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
            if the concatenated name is not valid for a PVC (for example, too long).
            
            An existing PVC with that name that is not owned by the pod will *not* be
            used for the pod to avoid using an unrelated volume by mistake. Starting
            the pod is then blocked until the unrelated PVC is removed. If such a
            pre-created PVC is meant to be used by the pod, the PVC has to updated with
            an owner reference to the pod once the pod exists. Normally this should not
            be necessary, but it may be useful when manually reconstructing a broken
            cluster.
            
            This field is read-only and no changes will be made by Kubernetes to the
            PVC after it has been created.
            
            Required, must not be nil.
            
            PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
            objects as part of an EphemeralVolumeSource.
            
            

            • metadata (Object) May contain labels and annotations that will be copied into the PVC when
              creating it. No other fields are allowed and will be rejected during
              validation.
              
              ObjectMeta is metadata that all persisted resources must have, which
              includes all objects users must create.
              
              

              • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                may be set by external tools to store and retrieve arbitrary metadata. They
                are not queryable and should be preserved when modifying objects. More
                info: http://kubernetes.io/docs/user-guide/annotations
                
              • clusterName (string) The name of the cluster which the object belongs to. This is used to
                distinguish resources with same name and namespace in different clusters.
                This field is not set anywhere right now and apiserver is going to ignore
                it if set in create or update request.
                
              • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                object was created. It is not guaranteed to be set in happens-before order
                across separate operations. Clients may not set this value. It is
                represented in RFC3339 form and is in UTC.
                
                Populated by the system. Read-only. Null for lists. More info:
                https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                
                Time is a wrapper around time.Time which supports correct marshaling to
                YAML and JSON. Wrappers are provided for many of the factory methods that
                the time package offers.
                
              • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                will be removed from the system. Only set when deletionTimestamp is also
                set. May only be shortened. Read-only.
                
              • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                deleted. This field is set by the server when a graceful deletion is
                requested by the user, and is not directly settable by a client. The
                resource is expected to be deleted (no longer visible from resource lists,
                and not reachable by name) after the time in this field, once the
                finalizers list is empty. As long as the finalizers list contains items,
                deletion is blocked. Once the deletionTimestamp is set, this value may not
                be unset or be set further into the future, although it may be shortened or
                the resource may be deleted prior to this time. For example, a user may
                request that a pod is deleted in 30 seconds. The Kubelet will react by
                sending a graceful termination signal to the containers in the pod. After
                that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                to the container and after cleanup, remove the pod from the API. In the
                presence of network partitions, this object may still exist after this
                timestamp, until an administrator or automated process can determine the
                resource is fully terminated. If not set, graceful deletion of the object
                has not been requested.
                
                Populated by the system when a graceful deletion is requested. Read-only.
                More info:
                https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                
                Time is a wrapper around time.Time which supports correct marshaling to
                YAML and JSON. Wrappers are provided for many of the factory methods that
                the time package offers.
                
              • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                an identifier for the responsible component that will remove the entry from
                the list. If the deletionTimestamp of the object is non-nil, entries in
                this list can only be removed. Finalizers may be processed and removed in
                any order. Order is NOT enforced because it introduces significant risk of
                stuck finalizers. finalizers is a shared field, any actor with permission
                can reorder it. If the finalizer list is processed in order, then this can
                lead to a situation in which the component responsible for the first
                finalizer in the list is waiting for a signal (field value, external
                system, or other) produced by a component responsible for a finalizer later
                in the list, resulting in a deadlock. Without enforced ordering finalizers
                are free to order amongst themselves and are not vulnerable to ordering
                changes in the list.
                
              • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                unique name ONLY IF the Name field has not been provided. If this field is
                used, the name returned to the client will be different than the name
                passed. This value will also be combined with a unique suffix. The provided
                value has the same validation rules as the Name field, and may be truncated
                by the length of the suffix required to make the value unique on the
                server.
                
                If this field is specified and the generated name exists, the server will
                NOT return a 409 - instead, it will either return 201 Created or 500 with
                Reason ServerTimeout indicating a unique name could not be found in the
                time allotted, and the client should retry (optionally after the time
                indicated in the Retry-After header).
                
                Applied only if Name is not specified. More info:
                https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                
              • generation (integer) A sequence number representing a specific generation of the desired state.
                Populated by the system. Read-only.
                
              • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                (scope and select) objects. May match selectors of replication controllers
                and services. More info: http://kubernetes.io/docs/user-guide/labels
                
              • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                managed by that workflow. This is mostly for internal housekeeping, and
                users typically shouldn't need to set or understand this field. A workflow
                can be the user's name, a controller's name, or the name of a specific
                apply path like "ci-cd". The set of fields is always in the version that
                the workflow used when modifying the object.
                
                ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                the resource that the fieldset applies to.
                
                

                • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                  to. The format is "group/version" just like the top-level APIVersion field.
                  It is necessary to track the version of a field set because it cannot be
                  automatically converted.
                  
                • fieldsType (string) FieldsType is the discriminator for the different fields format and
                  version. There is currently only one possible value: "FieldsV1"
                  
                • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                  type.
                  
                  FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                  format.
                  
                  Each key is either a '.' representing the field itself, and will always map
                  to an empty set, or a string representing a sub-field or item. The string
                  will follow one of these four formats: 'f:(name)', where (name) is the name
                  of a field in a struct, or key in a map 'v:(value)', where (value) is the
                  exact json formatted value of a list item 'i:(index)', where (index) is
                  position of a item in a list 'k:(keys)', where (keys) is a map of a list
                  item's key fields to their unique values If a key maps to an empty Fields
                  value, the field that key represents is part of the set.
                  
                  The exact format is defined in sigs.k8s.io/structured-merge-diff
                  
                  FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                  format.
                  
                  Each key is either a '.' representing the field itself, and will always map
                  to an empty set, or a string representing a sub-field or item. The string
                  will follow one of these four formats: 'f:(name)', where (name) is the name
                  of a field in a struct, or key in a map 'v:(value)', where (value) is the
                  exact json formatted value of a list item 'i:(index)', where (index) is
                  position of a item in a list 'k:(keys)', where (keys) is a map of a list
                  item's key fields to their unique values If a key maps to an empty Fields
                  value, the field that key represents is part of the set.
                  
                  The exact format is defined in sigs.k8s.io/structured-merge-diff
                  
                • manager (string) Manager is an identifier of the workflow managing these fields.
                  
                • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                  being created. The only valid values for this field are 'Apply' and
                  'Update'.
                  
                • subresource (string) Subresource is the name of the subresource used to update that object, or
                  empty string if the object was updated through the main resource. The value
                  of this field is used to distinguish between managers, even if they share
                  the same name. For example, a status update will be distinct from a regular
                  update using the same manager name. Note that the APIVersion field is not
                  related to the Subresource field and it always corresponds to the version
                  of the main resource.
                  
                • time (string) Time is timestamp of when these fields were set. It should always be empty
                  if Operation is 'Apply'
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
              • name (string) Name must be unique within a namespace. Is required when creating
                resources, although some resources may allow a client to request the
                generation of an appropriate name automatically. Name is primarily intended
                for creation idempotence and configuration definition. Cannot be updated.
                More info: http://kubernetes.io/docs/user-guide/identifiers#names
                
              • namespace (string) Namespace defines the space within which each name must be unique. An empty
                namespace is equivalent to the "default" namespace, but "default" is the
                canonical representation. Not all objects are required to be scoped to a
                namespace - the value of this field for those objects will be empty.
                
                Must be a DNS_LABEL. Cannot be updated. More info:
                http://kubernetes.io/docs/user-guide/namespaces
                
              • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                been deleted, this object will be garbage collected. If this object is
                managed by a controller, then an entry in this list will point to this
                controller, with the controller field set to true. There cannot be more
                than one managing controller.
                
                OwnerReference contains enough information to let you identify an owning
                object. An owning object must be in the same namespace as the dependent, or
                be cluster-scoped, so there is no namespace field.
                
                

                • apiVersion (string) API version of the referent.
                  
                • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                  owner cannot be deleted from the key-value store until this reference is
                  removed. Defaults to false. To set this field, a user needs "delete"
                  permission of the owner, otherwise 422 (Unprocessable Entity) will be
                  returned.
                  
                • controller (boolean) If true, this reference points to the managing controller.
                  
                • kind (string) Kind of the referent. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                  
                • name (string) Name of the referent. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • uid (string) UID of the referent. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • resourceVersion (string) An opaque value that represents the internal version of this object that
                can be used by clients to determine when objects have changed. May be used
                for optimistic concurrency, change detection, and the watch operation on a
                resource or set of resources. Clients must treat these values as opaque and
                passed unmodified back to the server. They may only be valid for a
                particular resource or set of resources.
                
                Populated by the system. Read-only. Value must be treated as opaque by
                clients and . More info:
                https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                
              • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                Read-only.
                
                DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                the field is planned to be removed in 1.21 release.
                
              • uid (string) UID is the unique in time and space value for this object. It is typically
                generated by the server on successful creation of a resource and is not
                allowed to change on PUT operations.
                
                Populated by the system. Read-only. More info:
                http://kubernetes.io/docs/user-guide/identifiers#uids
                
            • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
              copied unchanged into the PVC that gets created from this template. The
              same fields as in a PersistentVolumeClaim are also valid here.
              
              PersistentVolumeClaimSpec describes the common attributes of storage
              devices and allows a Source for provider-specific attributes
              
              

              • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                info:
                https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                
              • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                (PersistentVolumeClaim) If the provisioner or an external controller can
                support the specified data source, it will create a new volume based on the
                contents of the specified data source. If the AnyVolumeDataSource feature
                gate is enabled, this field will always have the same contents as the
                DataSourceRef field.
                
                TypedLocalObjectReference contains enough information to let you locate the
                typed referenced object inside the same namespace.
                
                

                • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                  specified, the specified Kind must be in the core API group. For any other
                  third-party types, APIGroup is required.
                  
                • kind (string) Kind is the type of resource being referenced
                  
                • name (string) Name is the name of resource being referenced
                  
              • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                non-empty volume is desired. This may be any local object from a non-empty
                API group (non core object) or a PersistentVolumeClaim object. When this
                field is specified, volume binding will only succeed if the type of the
                specified object matches some installed volume populator or dynamic
                provisioner. This field will replace the functionality of the DataSource
                field and as such if both fields are non-empty, they must have the same
                value. For backwards compatibility, both fields (DataSource and
                DataSourceRef) will be set to the same value automatically if one of them
                is empty and the other is non-empty. There are two important differences
                between DataSource and DataSourceRef: * While DataSource only allows two
                specific types of objects, DataSourceRef allows any non-core object, as
                well as PersistentVolumeClaim objects.
                * While DataSource ignores disallowed values (dropping them), DataSourceRef
                preserves all values, and generates an error if a disallowed value is
                specified. (Alpha) Using this field requires the AnyVolumeDataSource
                feature gate to be enabled.
                
                TypedLocalObjectReference contains enough information to let you locate the
                typed referenced object inside the same namespace.
                
                

                • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                  specified, the specified Kind must be in the core API group. For any other
                  third-party types, APIGroup is required.
                  
                • kind (string) Kind is the type of resource being referenced
                  
                • name (string) Name is the name of resource being referenced
                  
              • resources (Object) Resources represents the minimum resources the volume should have. If
                RecoverVolumeExpansionFailure feature is enabled users are allowed to
                specify resource requirements that are lower than previous value but must
                still be higher than capacity recorded in the status field of the claim.
                More info:
                https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                
                ResourceRequirements describes the compute resource requirements.
                
                

                • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                  Requests is omitted for a container, it defaults to Limits if that is
                  explicitly specified, otherwise to an implementation-defined value. More
                  info:
                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
              • selector (Object) A label query over volumes to consider for binding.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • storageClassName (string) Name of the StorageClass required by the claim. More info:
                https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                
              • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                Filesystem is implied when not included in claim spec.
                
              • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                claim.
                
        • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
          machine and then exposed to the pod.
          
          Represents a Fibre Channel volume. Fibre Channel volumes can only be
          mounted as read/write once. Fibre Channel volumes support ownership
          management and SELinux relabeling.
          
          

          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
            "ext4" if unspecified.
            
          • lun (integer) Optional: FC target lun number
            
          • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
            ReadOnly setting in VolumeMounts.
            
          • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
            
          • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
            combination of targetWWNs and lun must be set, but not both simultaneously.
            
        • flexVolume (Object) FlexVolume represents a generic volume resource that is
          provisioned/attached using an exec based plugin.
          
          FlexVolume represents a generic volume resource that is
          provisioned/attached using an exec based plugin.
          
          

          • driver (string) Driver is the name of the driver to use for this volume.
            
          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
            on FlexVolume script.
            
          • options (map[string]string) Optional: Extra command options if any.
            
          • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
            ReadOnly setting in VolumeMounts.
            
          • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
            information to pass to the plugin scripts. This may be empty if no secret
            object is specified. If the secret object contains more than one secret,
            all secrets are passed to the plugin scripts.
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
        • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
          This depends on the Flocker control service being running
          
          Represents a Flocker volume mounted by the Flocker agent. One and only one
          of datasetName and datasetUUID should be set. Flocker volumes do not
          support ownership management or SELinux relabeling.
          
          

          • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
            should be considered as deprecated
            
          • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
            
        • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
          kubelet's host machine and then exposed to the pod. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
          
          Represents a Persistent Disk resource in Google Compute Engine.
          A GCE PD must exist before mounting to a container. The disk must also be
          in the same GCE project and zone as the kubelet. A GCE PD can only be
          mounted as read/write once or read-only many times. GCE PDs support
          ownership management and SELinux relabeling.
          
          

          • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
            filesystem type is supported by the host operating system. Examples:
            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
            More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
          • partition (integer) The partition in the volume that you want to mount. If omitted, the default
            is to mount by volume name. Examples: For volume /dev/sda1, you specify the
            partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
            you can leave the property empty). More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
          • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
            More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
          • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
            false. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
        • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
          GitRepo is deprecated. To provision a container with a git repo, mount an
          EmptyDir into an InitContainer that clones the repo using git, then mount
          the EmptyDir into the Pod's container.
          
          Represents a volume that is populated with the contents of a git
          repository. Git repo volumes do not support ownership management. Git repo
          volumes support SELinux relabeling.
          
          DEPRECATED: GitRepo is deprecated. To provision a container with a git
          repo, mount an EmptyDir into an InitContainer that clones the repo using
          git, then mount the EmptyDir into the Pod's container.
          
          

          • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
            supplied, the volume directory will be the git repository. Otherwise, if
            specified, the volume will contain the git repository in the subdirectory
            with the given name.
            
          • repository (string) Repository URL
            
          • revision (string) Commit hash for the specified revision.
            
        • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
          lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
          
          Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
          volumes do not support ownership management or SELinux relabeling.
          
          

          • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
            info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
            
          • path (string) Path is the Glusterfs volume path. More info:
            https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
            
          • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
            permissions. Defaults to false. More info:
            https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
            
        • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
          that is directly exposed to the container. This is generally used for
          system agents or other privileged things that are allowed to see the host
          machine. Most containers will NOT need this. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#hostpath
          
          Represents a host path mapped into a pod. Host path volumes do not support
          ownership management or SELinux relabeling.
          
          

          • path (string) Path of the directory on the host. If the path is a symlink, it will follow
            the link to the real path. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
          • type (string) Type for HostPath Volume Defaults to "" More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
        • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
          host machine and then exposed to the pod. More info:
          https://examples.k8s.io/volumes/iscsi/README.md
          
          Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
          once. ISCSI volumes support ownership management and SELinux relabeling.
          
          

          • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
            
          • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
            
          • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
            filesystem type is supported by the host operating system. Examples:
            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
            
          • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
            iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
            name) will be created for the connection.
            
          • iqn (string) Target iSCSI Qualified Name.
            
          • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
            (tcp).
            
          • lun (integer) iSCSI Target Lun number.
            
          • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
            port is other than default (typically TCP ports 860 and 3260).
            
          • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
            false.
            
          • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
            is other than default (typically TCP ports 860 and 3260).
            
        • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
          https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
          
        • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
          info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
          
          Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
          not support ownership management or SELinux relabeling.
          
          

          • path (string) Path that is exported by the NFS server. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
          • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
            permissions. Defaults to false. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
          • server (string) Server is the hostname or IP address of the NFS server. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
        • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
          PersistentVolumeClaim in the same namespace. More info:
          https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
          
          PersistentVolumeClaimVolumeSource references the user's PVC in the same
          namespace. This volume finds the bound PV and mounts that volume for the
          pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
          another type of volume that is owned by someone else (the system).
          
          

          • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
            the pod using this volume. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
          • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
            
        • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
          and mounted on kubelets host machine
          
          Represents a Photon Controller persistent disk resource.
          
          

          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
            "ext4" if unspecified.
            
          • pdID (string) ID that identifies Photon Controller persistent disk
            
        • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
          kubelets host machine
          
          PortworxVolumeSource represents a Portworx volume resource.
          
          

          • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
            supported by the host operating system. Ex. "ext4", "xfs". Implicitly
            inferred to be "ext4" if unspecified.
            
          • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
            setting in VolumeMounts.
            
          • volumeID (string) VolumeID uniquely identifies a Portworx volume
            
        • projected (Object) Items for all in one resources secrets, configmaps, and downward API
          
          Represents a projected volume source
          
          

          • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
            octal value between 0000 and 0777 or a decimal value between 0 and 511.
            YAML accepts both octal and decimal values, JSON requires decimal values
            for mode bits. Directories within the path are not affected by this
            setting. This might be in conflict with other options that affect the file
            mode, like fsGroup, and the result can be other mode bits set.
            
          • sources ([]Object) list of volume projections
            
            Projection that may be projected along with other supported volume types
            
            

            • configMap (Object) information about the configMap data to project
              
              Adapts a ConfigMap into a projected volume.
              The contents of the target ConfigMap's Data field will be presented in a
              projected volume as files using the keys in the Data field as the file
              names, unless the items element is populated with specific mappings of keys
              to paths. Note that this is identical to a configmap volume source without
              the default mode.
              
              

              • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                ConfigMap will be projected into the volume as a file whose name is the key
                and content is the value. If specified, the listed keys will be projected
                into the specified paths, and unlisted keys will not be present. If a key
                is specified which is not present in the ConfigMap, the volume setup will
                error unless it is marked optional. Paths must be relative and may not
                contain the '..' path or start with '..'.
                
                Maps a string key to a path within a volume.
                
                

                • key (string) The key to project.
                  
                • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                  value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                  accepts both octal and decimal values, JSON requires decimal values for
                  mode bits. If not specified, the volume defaultMode will be used. This
                  might be in conflict with other options that affect the file mode, like
                  fsGroup, and the result can be other mode bits set.
                  
                • path (string) The relative path of the file to map the key to. May not be an absolute
                  path. May not contain the path element '..'. May not start with the string
                  '..'.
                  
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                
            • downwardAPI (Object) information about the downwardAPI data to project
              
              Represents downward API info for projecting into a projected volume. Note
              that this is identical to a downwardAPI volume source without the default
              mode.
              
              

              • items ([]Object) Items is a list of DownwardAPIVolume file
                
                DownwardAPIVolumeFile represents information to create the file containing
                the pod field
                
                

                • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                  namespace are supported.
                  
                  ObjectFieldSelector selects an APIVersioned field of an object.
                  
                  

                  • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                    "v1".
                    
                  • fieldPath (string) Path of the field to select in the specified API version.
                    
                • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                  value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                  accepts both octal and decimal values, JSON requires decimal values for
                  mode bits. If not specified, the volume defaultMode will be used. This
                  might be in conflict with other options that affect the file mode, like
                  fsGroup, and the result can be other mode bits set.
                  
                • path (string) Required: Path is the relative path name of the file to be created. Must
                  not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                  item of the relative path must not start with '..'
                  
                • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                  (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                  supported.
                  
                  ResourceFieldSelector represents container resources (cpu, memory) and
                  their output format
                  
                  

                  • containerName (string) Container name: required for volumes, optional for env vars
                    
                  • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • resource (string) Required: resource to select
                    
            • secret (Object) information about the secret data to project
              
              Adapts a secret into a projected volume.
              The contents of the target Secret's Data field will be presented in a
              projected volume as files using the keys in the Data field as the file
              names. Note that this is identical to a secret volume source without the
              default mode.
              
              

              • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                Secret will be projected into the volume as a file whose name is the key
                and content is the value. If specified, the listed keys will be projected
                into the specified paths, and unlisted keys will not be present. If a key
                is specified which is not present in the Secret, the volume setup will
                error unless it is marked optional. Paths must be relative and may not
                contain the '..' path or start with '..'.
                
                Maps a string key to a path within a volume.
                
                

                • key (string) The key to project.
                  
                • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                  value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                  accepts both octal and decimal values, JSON requires decimal values for
                  mode bits. If not specified, the volume defaultMode will be used. This
                  might be in conflict with other options that affect the file mode, like
                  fsGroup, and the result can be other mode bits set.
                  
                • path (string) The relative path of the file to map the key to. May not be an absolute
                  path. May not contain the path element '..'. May not start with the string
                  '..'.
                  
              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret or its key must be defined
                
            • serviceAccountToken (Object) information about the serviceAccountToken data to project
              
              ServiceAccountTokenProjection represents a projected service account token
              volume. This projection can be used to insert a service account token into
              the pods runtime filesystem for use against APIs (Kubernetes API Server or
              otherwise).
              
              

              • audience (string) Audience is the intended audience of the token. A recipient of a token must
                identify itself with an identifier specified in the audience of the token,
                and otherwise should reject the token. The audience defaults to the
                identifier of the apiserver.
                
              • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                account token. As the token approaches expiration, the kubelet volume
                plugin will proactively rotate the service account token. The kubelet will
                start trying to rotate the token if the token is older than 80 percent of
                its time to live or if the token is older than 24 hours.Defaults to 1 hour
                and must be at least 10 minutes.
                
              • path (string) Path is the path relative to the mount point of the file to project the
                token into.
                
        • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
          
          Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
          volumes do not support ownership management or SELinux relabeling.
          
          

          • group (string) Group to map volume access to Default is no group
            
          • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
            permissions. Defaults to false.
            
          • registry (string) Registry represents a single or multiple Quobyte Registry services
            specified as a string as host:port pair (multiple entries are separated
            with commas) which acts as the central registry for volumes
            
          • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
            provisioned Quobyte volumes, value is set by the plugin
            
          • user (string) User to map volume access to Defaults to serivceaccount user
            
          • volume (string) Volume is a string that references an already created Quobyte volume by
            name.
            
        • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
          lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
          
          Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
          volumes support ownership management and SELinux relabeling.
          
          

          • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
            filesystem type is supported by the host operating system. Examples:
            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
            
          • image (string) The rados image name. More info:
            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
          • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
          • monitors ([]string) A collection of Ceph monitors. More info:
            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
          • pool (string) The rados pool name. Default is rbd. More info:
            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
          • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
            false. More info:
            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
          • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
            overrides keyring. Default is nil. More info:
            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • user (string) The rados user name. Default is admin. More info:
            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
            
        • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
          Kubernetes nodes.
          
          ScaleIOVolumeSource represents a persistent ScaleIO volume
          
          

          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
            
          • gateway (string) The host address of the ScaleIO API Gateway.
            
          • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
            
          • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
            setting in VolumeMounts.
            
          • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
            information. If this is not provided, Login operation will fail.
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
            
          • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
            ThinProvisioned. Default is ThinProvisioned.
            
          • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
            
          • system (string) The name of the storage system as configured in ScaleIO.
            
          • volumeName (string) The name of a volume already created in the ScaleIO system that is
            associated with this volume source.
            
        • secret (Object) Secret represents a secret that should populate this volume. More info:
          https://kubernetes.io/docs/concepts/storage/volumes#secret
          
          Adapts a Secret into a volume.
          The contents of the target Secret's Data field will be presented in a
          volume as files using the keys in the Data field as the file names. Secret
          volumes support ownership management and SELinux relabeling.
          
          

          • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
            Must be an octal value between 0000 and 0777 or a decimal value between 0
            and 511. YAML accepts both octal and decimal values, JSON requires decimal
            values for mode bits. Defaults to 0644. Directories within the path are not
            affected by this setting. This might be in conflict with other options that
            affect the file mode, like fsGroup, and the result can be other mode bits
            set.
            
          • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
            Secret will be projected into the volume as a file whose name is the key
            and content is the value. If specified, the listed keys will be projected
            into the specified paths, and unlisted keys will not be present. If a key
            is specified which is not present in the Secret, the volume setup will
            error unless it is marked optional. Paths must be relative and may not
            contain the '..' path or start with '..'.
            
            Maps a string key to a path within a volume.
            
            

            • key (string) The key to project.
              
            • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
              value between 0000 and 0777 or a decimal value between 0 and 511. YAML
              accepts both octal and decimal values, JSON requires decimal values for
              mode bits. If not specified, the volume defaultMode will be used. This
              might be in conflict with other options that affect the file mode, like
              fsGroup, and the result can be other mode bits set.
              
            • path (string) The relative path of the file to map the key to. May not be an absolute
              path. May not contain the path element '..'. May not start with the string
              '..'.
              
          • optional (boolean) Specify whether the Secret or its keys must be defined
            
          • secretName (string) Name of the secret in the pod's namespace to use. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
        • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
          nodes.
          
          Represents a StorageOS persistent volume resource.
          
          

          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
            "ext4" if unspecified.
            
          • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
            setting in VolumeMounts.
            
          • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
            credentials. If not specified, default values will be attempted.
            
            LocalObjectReference contains enough information to let you locate the
            referenced object inside the same namespace.
            
            

            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
          • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
            are only unique within a namespace.
            
          • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
            namespace is specified then the Pod's namespace will be used. This allows
            the Kubernetes name scoping to be mirrored within StorageOS for tighter
            integration. Set VolumeName to any name to override the default behaviour.
            Set to "default" if you are not using namespaces within StorageOS.
            Namespaces that do not pre-exist within StorageOS will be created.
            
        • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
          host machine
          
          Represents a vSphere volume resource.
          
          

          • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
            operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
            "ext4" if unspecified.
            
          • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
            StoragePolicyName.
            
          • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
            
          • volumePath (string) Path that identifies vSphere volume vmdk
            
• ReplicationController ReplicationController represents the configuration of a replication
  controller.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) If the Labels of a ReplicationController are empty, they are defaulted to
    be the same as the Pod(s) that the replication controller manages. Standard
    object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • spec (Object) Spec defines the specification of the desired behavior of the replication
    controller. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    ReplicationControllerSpec is the specification of a replication controller.
    
    

    • minReadySeconds (integer) Minimum number of seconds for which a newly created pod should be ready
      without any of its container crashing, for it to be considered available.
      Defaults to 0 (pod will be considered available as soon as it is ready)
      
    • replicas (integer) Replicas is the number of desired replicas. This is a pointer to
      distinguish between explicit zero and unspecified. Defaults to 1. More
      info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller
      
    • selector (map[string]string) Selector is a label query over pods that should match the Replicas count.
      If Selector is empty, it is defaulted to the labels present on the Pod
      template. Label keys and values that must match in order to be controlled
      by this replication controller, if empty defaulted to labels on Pod
      template. More info:
      https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
      
    • template (Object) Template is the object that describes the pod that will be created if
      insufficient replicas are detected. This takes precedence over a
      TemplateRef. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#pod-template
      
      PodTemplateSpec describes the data a pod should have when created from a
      template
      
      

      • metadata (Object) Standard object's metadata. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
        
        ObjectMeta is metadata that all persisted resources must have, which
        includes all objects users must create.
        
        

        • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
          may be set by external tools to store and retrieve arbitrary metadata. They
          are not queryable and should be preserved when modifying objects. More
          info: http://kubernetes.io/docs/user-guide/annotations
          
        • clusterName (string) The name of the cluster which the object belongs to. This is used to
          distinguish resources with same name and namespace in different clusters.
          This field is not set anywhere right now and apiserver is going to ignore
          it if set in create or update request.
          
        • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
          object was created. It is not guaranteed to be set in happens-before order
          across separate operations. Clients may not set this value. It is
          represented in RFC3339 form and is in UTC.
          
          Populated by the system. Read-only. Null for lists. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
          will be removed from the system. Only set when deletionTimestamp is also
          set. May only be shortened. Read-only.
          
        • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
          deleted. This field is set by the server when a graceful deletion is
          requested by the user, and is not directly settable by a client. The
          resource is expected to be deleted (no longer visible from resource lists,
          and not reachable by name) after the time in this field, once the
          finalizers list is empty. As long as the finalizers list contains items,
          deletion is blocked. Once the deletionTimestamp is set, this value may not
          be unset or be set further into the future, although it may be shortened or
          the resource may be deleted prior to this time. For example, a user may
          request that a pod is deleted in 30 seconds. The Kubelet will react by
          sending a graceful termination signal to the containers in the pod. After
          that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
          to the container and after cleanup, remove the pod from the API. In the
          presence of network partitions, this object may still exist after this
          timestamp, until an administrator or automated process can determine the
          resource is fully terminated. If not set, graceful deletion of the object
          has not been requested.
          
          Populated by the system when a graceful deletion is requested. Read-only.
          More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
          
          Time is a wrapper around time.Time which supports correct marshaling to
          YAML and JSON. Wrappers are provided for many of the factory methods that
          the time package offers.
          
        • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
          an identifier for the responsible component that will remove the entry from
          the list. If the deletionTimestamp of the object is non-nil, entries in
          this list can only be removed. Finalizers may be processed and removed in
          any order. Order is NOT enforced because it introduces significant risk of
          stuck finalizers. finalizers is a shared field, any actor with permission
          can reorder it. If the finalizer list is processed in order, then this can
          lead to a situation in which the component responsible for the first
          finalizer in the list is waiting for a signal (field value, external
          system, or other) produced by a component responsible for a finalizer later
          in the list, resulting in a deadlock. Without enforced ordering finalizers
          are free to order amongst themselves and are not vulnerable to ordering
          changes in the list.
          
        • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
          unique name ONLY IF the Name field has not been provided. If this field is
          used, the name returned to the client will be different than the name
          passed. This value will also be combined with a unique suffix. The provided
          value has the same validation rules as the Name field, and may be truncated
          by the length of the suffix required to make the value unique on the
          server.
          
          If this field is specified and the generated name exists, the server will
          NOT return a 409 - instead, it will either return 201 Created or 500 with
          Reason ServerTimeout indicating a unique name could not be found in the
          time allotted, and the client should retry (optionally after the time
          indicated in the Retry-After header).
          
          Applied only if Name is not specified. More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
          
        • generation (integer) A sequence number representing a specific generation of the desired state.
          Populated by the system. Read-only.
          
        • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
          (scope and select) objects. May match selectors of replication controllers
          and services. More info: http://kubernetes.io/docs/user-guide/labels
          
        • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
          managed by that workflow. This is mostly for internal housekeeping, and
          users typically shouldn't need to set or understand this field. A workflow
          can be the user's name, a controller's name, or the name of a specific
          apply path like "ci-cd". The set of fields is always in the version that
          the workflow used when modifying the object.
          
          ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
          the resource that the fieldset applies to.
          
          

          • apiVersion (string) APIVersion defines the version of this resource that this field set applies
            to. The format is "group/version" just like the top-level APIVersion field.
            It is necessary to track the version of a field set because it cannot be
            automatically converted.
            
          • fieldsType (string) FieldsType is the discriminator for the different fields format and
            version. There is currently only one possible value: "FieldsV1"
            
          • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
            type.
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
            FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
            format.
            
            Each key is either a '.' representing the field itself, and will always map
            to an empty set, or a string representing a sub-field or item. The string
            will follow one of these four formats: 'f:(name)', where (name) is the name
            of a field in a struct, or key in a map 'v:(value)', where (value) is the
            exact json formatted value of a list item 'i:(index)', where (index) is
            position of a item in a list 'k:(keys)', where (keys) is a map of a list
            item's key fields to their unique values If a key maps to an empty Fields
            value, the field that key represents is part of the set.
            
            The exact format is defined in sigs.k8s.io/structured-merge-diff
            
          • manager (string) Manager is an identifier of the workflow managing these fields.
            
          • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
            being created. The only valid values for this field are 'Apply' and
            'Update'.
            
          • subresource (string) Subresource is the name of the subresource used to update that object, or
            empty string if the object was updated through the main resource. The value
            of this field is used to distinguish between managers, even if they share
            the same name. For example, a status update will be distinct from a regular
            update using the same manager name. Note that the APIVersion field is not
            related to the Subresource field and it always corresponds to the version
            of the main resource.
            
          • time (string) Time is timestamp of when these fields were set. It should always be empty
            if Operation is 'Apply'
            
            Time is a wrapper around time.Time which supports correct marshaling to
            YAML and JSON. Wrappers are provided for many of the factory methods that
            the time package offers.
            
        • name (string) Name must be unique within a namespace. Is required when creating
          resources, although some resources may allow a client to request the
          generation of an appropriate name automatically. Name is primarily intended
          for creation idempotence and configuration definition. Cannot be updated.
          More info: http://kubernetes.io/docs/user-guide/identifiers#names
          
        • namespace (string) Namespace defines the space within which each name must be unique. An empty
          namespace is equivalent to the "default" namespace, but "default" is the
          canonical representation. Not all objects are required to be scoped to a
          namespace - the value of this field for those objects will be empty.
          
          Must be a DNS_LABEL. Cannot be updated. More info:
          http://kubernetes.io/docs/user-guide/namespaces
          
        • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
          been deleted, this object will be garbage collected. If this object is
          managed by a controller, then an entry in this list will point to this
          controller, with the controller field set to true. There cannot be more
          than one managing controller.
          
          OwnerReference contains enough information to let you identify an owning
          object. An owning object must be in the same namespace as the dependent, or
          be cluster-scoped, so there is no namespace field.
          
          

          • apiVersion (string) API version of the referent.
            
          • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
            owner cannot be deleted from the key-value store until this reference is
            removed. Defaults to false. To set this field, a user needs "delete"
            permission of the owner, otherwise 422 (Unprocessable Entity) will be
            returned.
            
          • controller (boolean) If true, this reference points to the managing controller.
            
          • kind (string) Kind of the referent. More info:
            https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
            
          • name (string) Name of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#names
            
          • uid (string) UID of the referent. More info:
            http://kubernetes.io/docs/user-guide/identifiers#uids
            
        • resourceVersion (string) An opaque value that represents the internal version of this object that
          can be used by clients to determine when objects have changed. May be used
          for optimistic concurrency, change detection, and the watch operation on a
          resource or set of resources. Clients must treat these values as opaque and
          passed unmodified back to the server. They may only be valid for a
          particular resource or set of resources.
          
          Populated by the system. Read-only. Value must be treated as opaque by
          clients and . More info:
          https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
          
        • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
          Read-only.
          
          DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
          the field is planned to be removed in 1.21 release.
          
        • uid (string) UID is the unique in time and space value for this object. It is typically
          generated by the server on successful creation of a resource and is not
          allowed to change on PUT operations.
          
          Populated by the system. Read-only. More info:
          http://kubernetes.io/docs/user-guide/identifiers#uids
          
      • spec (Object) Specification of the desired behavior of the pod. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
        
        PodSpec is a description of a pod.
        
        

        • activeDeadlineSeconds (integer) Optional duration in seconds the pod may be active on the node relative to
          StartTime before the system will actively try to mark it failed and kill
          associated containers. Value must be a positive integer.
          
        • affinity (Object) If specified, the pod's scheduling constraints
          
          Affinity is a group of affinity scheduling rules.
          
          

          • nodeAffinity (Object) Describes node affinity scheduling rules for the pod.
            
            Node affinity is a group of node affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node matches
              the corresponding matchExpressions; the node(s) with the highest sum are
              the most preferred.
              
              An empty preferred scheduling term matches all objects with implicit weight
              0 (i.e. it's a no-op). A null preferred scheduling term matches no objects
              (i.e. is also a no-op).
              
              

              • preference (Object) A node selector term, associated with the corresponding weight.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
              • weight (integer) Weight associated with matching the corresponding nodeSelectorTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution (Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to an update), the system may or may not try
              to eventually evict the pod from its node.
              
              A node selector represents the union of the results of one or more label
              queries over a set of nodes; that is, it represents the OR of the selectors
              represented by the node selector terms.
              
              

              • nodeSelectorTerms ([]Object) Required. A list of node selector terms. The terms are ORed.
                
                A null or empty node selector term matches no objects. The requirements of
                them are ANDed. The TopologySelectorTerm type implements a subset of the
                NodeSelectorTerm.
                
                

                • matchExpressions ([]Object) A list of node selector requirements by node's labels.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
                • matchFields ([]Object) A list of node selector requirements by node's fields.
                  
                  A node selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) The label key that the selector applies to.
                    
                  • operator (string) Represents a key's relationship to a set of values. Valid operators are In,
                    NotIn, Exists, DoesNotExist. Gt, and Lt.
                    
                    
                    
                  • values ([]string) An array of string values. If the operator is In or NotIn, the values array
                    must be non-empty. If the operator is Exists or DoesNotExist, the values
                    array must be empty. If the operator is Gt or Lt, the values array must
                    have a single element, which will be interpreted as an integer. This array
                    is replaced during a strategic merge patch.
                    
          • podAffinity (Object) Describes pod affinity scheduling rules (e.g. co-locate this pod in the
            same node, zone, etc. as some other pod(s)).
            
            Pod affinity is a group of inter pod affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              affinity expressions specified by this field, but it may choose a node that
              violates one or more of the expressions. The node that is most preferred is
              the one with the greatest sum of weights, i.e. for each node that meets all
              of the scheduling requirements (resource request, requiredDuringScheduling
              affinity expressions, etc.), compute a sum by iterating through the
              elements of this field and adding "weight" to the sum if the node has pods
              which matches the corresponding podAffinityTerm; the node(s) with the
              highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              affinity requirements specified by this field cease to be met at some point
              during pod execution (e.g. due to a pod label update), the system may or
              may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
          • podAntiAffinity (Object) Describes pod anti-affinity scheduling rules (e.g. avoid putting this pod
            in the same node, zone, etc. as some other pod(s)).
            
            Pod anti affinity is a group of inter pod anti affinity scheduling rules.
            
            

            • preferredDuringSchedulingIgnoredDuringExecution ([]Object) The scheduler will prefer to schedule pods to nodes that satisfy the
              anti-affinity expressions specified by this field, but it may choose a node
              that violates one or more of the expressions. The node that is most
              preferred is the one with the greatest sum of weights, i.e. for each node
              that meets all of the scheduling requirements (resource request,
              requiredDuringScheduling anti-affinity expressions, etc.), compute a sum by
              iterating through the elements of this field and adding "weight" to the sum
              if the node has pods which matches the corresponding podAffinityTerm; the
              node(s) with the highest sum are the most preferred.
              
              The weights of all of the matched WeightedPodAffinityTerm fields are added
              per-node to find the most preferred node(s)
              
              

              • podAffinityTerm (Object) Required. A pod affinity term, associated with the corresponding weight.
                
                Defines a set of pods (namely those matching the labelSelector relative to
                the given namespace(s)) that this pod should be co-located (affinity) or
                not co-located (anti-affinity) with, where co-located is defined as running
                on a node whose value of the label with key (topologyKey) matches that of
                any node on which a pod of the set of pods is running
                
                

                • labelSelector (Object) A label query over a set of resources, in this case pods.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                  is applied to the union of the namespaces selected by this field and the
                  ones listed in the namespaces field. null selector and null or empty
                  namespaces list means "this pod's namespace". An empty selector ({})
                  matches all namespaces. This field is beta-level and is only honored when
                  PodAffinityNamespaceSelector feature is enabled.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                  to. The term is applied to the union of the namespaces listed in this field
                  and the ones selected by namespaceSelector. null or empty namespaces list
                  and null namespaceSelector means "this pod's namespace"
                  
                • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                  with the pods matching the labelSelector in the specified namespaces, where
                  co-located is defined as running on a node whose value of the label with
                  key topologyKey matches that of any node on which any of the selected pods
                  is running. Empty topologyKey is not allowed.
                  
              • weight (integer) weight associated with matching the corresponding podAffinityTerm, in the
                range 1-100.
                
            • requiredDuringSchedulingIgnoredDuringExecution ([]Object) If the anti-affinity requirements specified by this field are not met at
              scheduling time, the pod will not be scheduled onto the node. If the
              anti-affinity requirements specified by this field cease to be met at some
              point during pod execution (e.g. due to a pod label update), the system may
              or may not try to eventually evict the pod from its node. When there are
              multiple elements, the lists of nodes corresponding to each podAffinityTerm
              are intersected, i.e. all terms must be satisfied.
              
              Defines a set of pods (namely those matching the labelSelector relative to
              the given namespace(s)) that this pod should be co-located (affinity) or
              not co-located (anti-affinity) with, where co-located is defined as running
              on a node whose value of the label with key (topologyKey) matches that of
              any node on which a pod of the set of pods is running
              
              

              • labelSelector (Object) A label query over a set of resources, in this case pods.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaceSelector (Object) A label query over the set of namespaces that the term applies to. The term
                is applied to the union of the namespaces selected by this field and the
                ones listed in the namespaces field. null selector and null or empty
                namespaces list means "this pod's namespace". An empty selector ({})
                matches all namespaces. This field is beta-level and is only honored when
                PodAffinityNamespaceSelector feature is enabled.
                
                A label selector is a label query over a set of resources. The result of
                matchLabels and matchExpressions are ANDed. An empty label selector matches
                all objects. A null label selector matches no objects.
                
                

                • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                  are ANDed.
                  
                  A label selector requirement is a selector that contains values, a key, and
                  an operator that relates the key and values.
                  
                  

                  • key (string) key is the label key that the selector applies to.
                    
                  • operator (string) operator represents a key's relationship to a set of values. Valid
                    operators are In, NotIn, Exists and DoesNotExist.
                    
                  • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                    values array must be non-empty. If the operator is Exists or DoesNotExist,
                    the values array must be empty. This array is replaced during a strategic
                    merge patch.
                    
                • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                  matchLabels map is equivalent to an element of matchExpressions, whose key
                  field is "key", the operator is "In", and the values array contains only
                  "value". The requirements are ANDed.
                  
              • namespaces ([]string) namespaces specifies a static list of namespace names that the term applies
                to. The term is applied to the union of the namespaces listed in this field
                and the ones selected by namespaceSelector. null or empty namespaces list
                and null namespaceSelector means "this pod's namespace"
                
              • topologyKey (string) This pod should be co-located (affinity) or not co-located (anti-affinity)
                with the pods matching the labelSelector in the specified namespaces, where
                co-located is defined as running on a node whose value of the label with
                key topologyKey matches that of any node on which any of the selected pods
                is running. Empty topologyKey is not allowed.
                
        • automountServiceAccountToken (boolean) AutomountServiceAccountToken indicates whether a service account token
          should be automatically mounted.
          
        • containers ([]Object) List of containers belonging to the pod. Containers cannot currently be
          added or removed. There must be at least one container in a Pod. Cannot be
          updated.
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • dnsConfig (Object) Specifies the DNS parameters of a pod. Parameters specified here will be
          merged to the generated DNS configuration based on DNSPolicy.
          
          PodDNSConfig defines the DNS parameters of a pod in addition to those
          generated from DNSPolicy.
          
          

          • nameservers ([]string) A list of DNS name server IP addresses. This will be appended to the base
            nameservers generated from DNSPolicy. Duplicated nameservers will be
            removed.
            
          • options ([]Object) A list of DNS resolver options. This will be merged with the base options
            generated from DNSPolicy. Duplicated entries will be removed. Resolution
            options given in Options will override those that appear in the base
            DNSPolicy.
            
            PodDNSConfigOption defines DNS resolver options of a pod.
            
            

            • name (string) Required.
              
            • value (string) (empty)
              
          • searches ([]string) A list of DNS search domains for host-name lookup. This will be appended to
            the base search paths generated from DNSPolicy. Duplicated search paths
            will be removed.
            
        • dnsPolicy (string) Set DNS policy for the pod. Defaults to "ClusterFirst". Valid values are
          'ClusterFirstWithHostNet', 'ClusterFirst', 'Default' or 'None'. DNS
          parameters given in DNSConfig will be merged with the policy selected with
          DNSPolicy. To have DNS options set along with hostNetwork, you have to
          specify DNS policy explicitly to 'ClusterFirstWithHostNet'.
          
          
          
        • enableServiceLinks (boolean) EnableServiceLinks indicates whether information about services should be
          injected into pod's environment variables, matching the syntax of Docker
          links. Optional: Defaults to true.
          
        • ephemeralContainers ([]Object) List of ephemeral containers run in this pod. Ephemeral containers may be
          run in an existing pod to perform user-initiated actions such as debugging.
          This list cannot be specified when creating a pod, and it cannot be
          modified by updating the pod spec. In order to add an ephemeral container
          to an existing pod, use the pod's ephemeralcontainers subresource. This
          field is beta-level and available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          An EphemeralContainer is a temporary container that you may add to an
          existing Pod for user-initiated activities such as debugging. Ephemeral
          containers have no resource or scheduling guarantees, and they will not be
          restarted when they exit or when a Pod is removed or restarted. The kubelet
          may evict a Pod if an ephemeral container causes the Pod to exceed its
          resource allocation.
          
          To add an ephemeral container, use the ephemeralcontainers subresource of
          an existing Pod. Ephemeral containers may not be removed or restarted.
          
          This is a beta feature available on clusters that haven't disabled the
          EphemeralContainers feature gate.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Lifecycle is not allowed for ephemeral containers.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the ephemeral container specified as a DNS_LABEL. This name must be
            unique among all containers, init containers and ephemeral containers.
            
          • ports ([]Object) Ports are not allowed for ephemeral containers.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Resources are not allowed for ephemeral containers. Ephemeral containers
            use spare resources already allocated to the pod.
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) Optional: SecurityContext defines the security options the ephemeral
            container should be run with. If set, the fields of SecurityContext
            override the equivalent fields of PodSecurityContext.
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) Probes are not allowed for ephemeral containers.
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • targetContainerName (string) If set, the name of the container from PodSpec that this ephemeral
            container targets. The ephemeral container will be run in the namespaces
            (IPC, PID, etc) of this container. If not set then the ephemeral container
            uses the namespaces configured in the Pod spec.
            
            The container runtime must implement support for this feature. If the
            runtime does not support namespace targeting then the result of setting
            this field is undefined.
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Subpath mounts are
            not allowed for ephemeral containers. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • hostAliases ([]Object) HostAliases is an optional list of hosts and IPs that will be injected into
          the pod's hosts file if specified. This is only valid for non-hostNetwork
          pods.
          
          HostAlias holds the mapping between IP and hostnames that will be injected
          as an entry in the pod's hosts file.
          
          

          • hostnames ([]string) Hostnames for the above IP address.
            
          • ip (string) IP address of the host file entry.
            
        • hostIPC (boolean) Use the host's ipc namespace. Optional: Default to false.
          
        • hostNetwork (boolean) Host networking requested for this pod. Use the host's network namespace.
          If this option is set, the ports that will be used must be specified.
          Default to false.
          
        • hostPID (boolean) Use the host's pid namespace. Optional: Default to false.
          
        • hostname (string) Specifies the hostname of the Pod If not specified, the pod's hostname will
          be set to a system-defined value.
          
        • imagePullSecrets ([]Object) ImagePullSecrets is an optional list of references to secrets in the same
          namespace to use for pulling any of the images used by this PodSpec. If
          specified, these secrets will be passed to individual puller
          implementations for them to use. For example, in the case of docker, only
          DockerConfig type secrets are honored. More info:
          https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod
          
          LocalObjectReference contains enough information to let you locate the
          referenced object inside the same namespace.
          
          

          • name (string) Name of the referent. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
        • initContainers ([]Object) List of initialization containers belonging to the pod. Init containers are
          executed in order prior to containers being started. If any init container
          fails, the pod is considered to have failed and is handled according to its
          restartPolicy. The name for an init container or normal container must be
          unique among all containers. Init containers may not have Lifecycle
          actions, Readiness probes, Liveness probes, or Startup probes. The
          resourceRequirements of an init container are taken into account during
          scheduling by finding the highest request/limit for each resource type, and
          then using the max of of that value or the sum of the normal containers.
          Limits are applied to init containers in a similar fashion. Init containers
          cannot currently be added or removed. Cannot be updated. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
          
          A single application container that you want to run within a pod.
          
          

          • args ([]string) Arguments to the entrypoint. The docker image's CMD is used if this is not
            provided. Variable references $(VAR_NAME) are expanded using the
            container's environment. If a variable cannot be resolved, the reference in
            the input string will be unchanged. Double $$ are reduced to a single $,
            which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
            produce the string literal "$(VAR_NAME)". Escaped references will never be
            expanded, regardless of whether the variable exists or not. Cannot be
            updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • command ([]string) Entrypoint array. Not executed within a shell. The docker image's
            ENTRYPOINT is used if this is not provided. Variable references $(VAR_NAME)
            are expanded using the container's environment. If a variable cannot be
            resolved, the reference in the input string will be unchanged. Double $$
            are reduced to a single $, which allows for escaping the $(VAR_NAME)
            syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
            Escaped references will never be expanded, regardless of whether the
            variable exists or not. Cannot be updated. More info:
            https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell
            
          • env ([]Object) List of environment variables to set in the container. Cannot be updated.
            
            EnvVar represents an environment variable present in a Container.
            
            

            • name (string) Name of the environment variable. Must be a C_IDENTIFIER.
              
            • value (string) Variable references $(VAR_NAME) are expanded using the previously defined
              environment variables in the container and any service environment
              variables. If a variable cannot be resolved, the reference in the input
              string will be unchanged. Double $$ are reduced to a single $, which allows
              for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the
              string literal "$(VAR_NAME)". Escaped references will never be expanded,
              regardless of whether the variable exists or not. Defaults to "".
              
            • valueFrom (Object) Source for the environment variable's value. Cannot be used if value is not
              empty.
              
              EnvVarSource represents a source for the value of an EnvVar.
              
              

              • configMapKeyRef (Object) Selects a key of a ConfigMap.
                
                Selects a key from a ConfigMap.
                
                

                • key (string) The key to select.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its key must be defined
                  
              • fieldRef (Object) Selects a field of the pod: supports metadata.name, metadata.namespace,
                `metadata.labels['(KEY)']`, `metadata.annotations['(KEY)']`, spec.nodeName,
                spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu,
                requests.memory and requests.ephemeral-storage) are currently supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
              • secretKeyRef (Object) Selects a key of a secret in the pod's namespace
                
                SecretKeySelector selects a key of a Secret.
                
                

                • key (string) The key of the secret to select from. Must be a valid secret key.
                  
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
          • envFrom ([]Object) List of sources to populate environment variables in the container. The
            keys defined within a source must be a C_IDENTIFIER. All invalid keys will
            be reported as an event when the container is starting. When a key exists
            in multiple sources, the value associated with the last source will take
            precedence. Values defined by an Env with a duplicate key will take
            precedence. Cannot be updated.
            
            EnvFromSource represents the source of a set of ConfigMaps
            
            

            • configMapRef (Object) The ConfigMap to select from
              
              ConfigMapEnvSource selects a ConfigMap to populate the environment
              variables with.
              
              The contents of the target ConfigMap's Data field will represent the
              key-value pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the ConfigMap must be defined
                
            • prefix (string) An optional identifier to prepend to each key in the ConfigMap. Must be a
              C_IDENTIFIER.
              
            • secretRef (Object) The Secret to select from
              
              SecretEnvSource selects a Secret to populate the environment variables
              with.
              
              The contents of the target Secret's Data field will represent the key-value
              pairs as environment variables.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
              • optional (boolean) Specify whether the Secret must be defined
                
          • image (string) Docker image name. More info:
            https://kubernetes.io/docs/concepts/containers/images This field is
            optional to allow higher level config management to default or override
            container images in workload controllers like Deployments and StatefulSets.
            
          • imagePullPolicy (string) Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always
            if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
            More info:
            https://kubernetes.io/docs/concepts/containers/images#updating-images
            
            
            
          • lifecycle (Object) Actions that the management system should take in response to container
            lifecycle events. Cannot be updated.
            
            Lifecycle describes actions that the management system should take in
            response to container lifecycle events. For the PostStart and PreStop
            lifecycle handlers, management of the container blocks until the action is
            complete, unless the container process fails, in which case the handler is
            aborted.
            
            

            • postStart (Object) PostStart is called immediately after a container is created. If the
              handler fails, the container is terminated and restarted according to its
              restart policy. Other management of the container blocks until the hook
              completes. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
            • preStop (Object) PreStop is called immediately before a container is terminated due to an
              API request or management event such as liveness/startup probe failure,
              preemption, resource contention, etc. The handler is not called if the
              container crashes or exits. The Pod's termination grace period countdown
              begins before the PreStop hook is executed. Regardless of the outcome of
              the handler, the container will eventually terminate within the Pod's
              termination grace period (unless delayed by finalizers). Other management
              of the container blocks until the hook completes or until the termination
              grace period is reached. More info:
              https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
              
              LifecycleHandler defines a specific action that should be taken in a
              lifecycle hook. One and only one of the fields, except TCPSocket must be
              specified.
              
              

              • exec (Object) Exec specifies the action to take.
                
                ExecAction describes a "run in container" action.
                
                

                • command ([]string) Command is the command line to execute inside the container, the working
                  directory for the command is root ('/') in the container's filesystem. The
                  command is simply exec'd, it is not run inside a shell, so traditional
                  shell instructions ('|', etc) won't work. To use a shell, you need to
                  explicitly call out to that shell. Exit status of 0 is treated as
                  live/healthy and non-zero is unhealthy.
                  
              • httpGet (Object) HTTPGet specifies the http request to perform.
                
                HTTPGetAction describes an action based on HTTP Get requests.
                
                

                • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                  "Host" in httpHeaders instead.
                  
                • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                  
                  HTTPHeader describes a custom header to be used in HTTP probes
                  
                  

                  • name (string) The header field name
                    
                  • value (string) The header field value
                    
                • path (string) Path to access on the HTTP server.
                  
                • port (string) Name or number of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
                • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                  
                  
              • tcpSocket (Object) Deprecated. TCPSocket is NOT supported as a LifecycleHandler and kept for
                the backward compatibility. There are no validation of this field and
                lifecycle hooks will fail in runtime when tcp handler is specified.
                
                TCPSocketAction describes an action based on opening a socket
                
                

                • host (string) Optional: Host name to connect to, defaults to the pod IP.
                  
                • port (string) Number or name of the port to access on the container. Number must be in
                  the range 1 to 65535. Name must be an IANA_SVC_NAME.
                  
                  IntOrString is a type that can hold an int32 or a string. When used in JSON
                  or YAML marshalling and unmarshalling, it produces or consumes the inner
                  type. This allows you to have, for example, a JSON field that can accept a
                  name or number.
                  
          • livenessProbe (Object) Periodic probe of container liveness. Container will be restarted if the
            probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • name (string) Name of the container specified as a DNS_LABEL. Each container in a pod
            must have a unique name (DNS_LABEL). Cannot be updated.
            
          • ports ([]Object) List of ports to expose from the container. Exposing a port here gives the
            system additional information about the network connections a container
            uses, but is primarily informational. Not specifying a port here DOES NOT
            prevent that port from being exposed. Any port which is listening on the
            default "0.0.0.0" address inside a container will be accessible from the
            network. Cannot be updated.
            
            ContainerPort represents a network port in a single container.
            
            

            • containerPort (integer) Number of port to expose on the pod's IP address. This must be a valid port
              number, 0 ( x ( 65536.
              
            • hostIP (string) What host IP to bind the external port to.
              
            • hostPort (integer) Number of port to expose on the host. If specified, this must be a valid
              port number, 0 ( x ( 65536. If HostNetwork is specified, this must match
              ContainerPort. Most containers do not need this.
              
            • name (string) If specified, this must be an IANA_SVC_NAME and unique within the pod. Each
              named port in a pod must have a unique name. Name for the port that can be
              referred to by services.
              
            • protocol (string) Protocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".
              
              
          • readinessProbe (Object) Periodic probe of container service readiness. Container will be removed
            from service endpoints if the probe fails. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • resources (Object) Compute Resources required by this container. Cannot be updated. More info:
            https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
            
            ResourceRequirements describes the compute resource requirements.
            
            

            • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
            • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
              Requests is omitted for a container, it defaults to Limits if that is
              explicitly specified, otherwise to an implementation-defined value. More
              info:
              https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • securityContext (Object) SecurityContext defines the security options the container should be run
            with. If set, the fields of SecurityContext override the equivalent fields
            of PodSecurityContext. More info:
            https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
            
            SecurityContext holds security configuration that will be applied to a
            container. Some fields are present in both SecurityContext and
            PodSecurityContext. When both are set, the values in SecurityContext take
            precedence.
            
            

            • allowPrivilegeEscalation (boolean) AllowPrivilegeEscalation controls whether a process can gain more
              privileges than its parent process. This bool directly controls if the
              no_new_privs flag will be set on the container process.
              AllowPrivilegeEscalation is true always when the container is: 1) run as
              Privileged 2) has CAP_SYS_ADMIN Note that this field cannot be set when
              spec.os.name is windows.
              
            • capabilities (Object) The capabilities to add/drop when running containers. Defaults to the
              default set of capabilities granted by the container runtime. Note that
              this field cannot be set when spec.os.name is windows.
              
              Adds and removes POSIX capabilities from running containers.
              
              

              • add ([]string) Added capabilities
                
              • drop ([]string) Removed capabilities
                
            • privileged (boolean) Run container in privileged mode. Processes in privileged containers are
              essentially equivalent to root on the host. Defaults to false. Note that
              this field cannot be set when spec.os.name is windows.
              
            • procMount (string) procMount denotes the type of proc mount to use for the containers. The
              default is DefaultProcMount which uses the container runtime defaults for
              readonly paths and masked paths. This requires the ProcMountType feature
              flag to be enabled. Note that this field cannot be set when spec.os.name is
              windows.
              
            • readOnlyRootFilesystem (boolean) Whether this container has a read-only root filesystem. Default is false.
              Note that this field cannot be set when spec.os.name is windows.
              
            • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
              default if unset. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
            • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
              Kubelet will validate the image at runtime to ensure that it does not run
              as UID 0 (root) and fail to start the container if it does. If unset or
              false, no such validation will be performed. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence.
              
            • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
              specified in image metadata if unspecified. May also be set in
              PodSecurityContext. If set in both SecurityContext and PodSecurityContext,
              the value specified in SecurityContext takes precedence. Note that this
              field cannot be set when spec.os.name is windows.
              
            • seLinuxOptions (Object) The SELinux context to be applied to the container. If unspecified, the
              container runtime will allocate a random SELinux context for each
              container. May also be set in PodSecurityContext. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is windows.
              
              SELinuxOptions are the labels to be applied to the container
              
              

              • level (string) Level is SELinux level label that applies to the container.
                
              • role (string) Role is a SELinux role label that applies to the container.
                
              • type (string) Type is a SELinux type label that applies to the container.
                
              • user (string) User is a SELinux user label that applies to the container.
                
            • seccompProfile (Object) The seccomp options to use by this container. If seccomp options are
              provided at both the pod & container level, the container options override
              the pod options. Note that this field cannot be set when spec.os.name is
              windows.
              
              SeccompProfile defines a pod/container's seccomp profile settings. Only one
              profile source may be set.
              
              

              • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
                be used. The profile must be preconfigured on the node to work. Must be a
                descending path, relative to the kubelet's configured seccomp profile
                location. Must only be set if type is "Localhost".
                
              • type (string) type indicates which kind of seccomp profile will be applied. Valid options
                are:
                
                Localhost - a profile defined in a file on the node should be used.
                RuntimeDefault - the container runtime default profile should be used.
                Unconfined - no profile should be applied.
                
                
                
            • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
              the options from the PodSecurityContext will be used. If set in both
              SecurityContext and PodSecurityContext, the value specified in
              SecurityContext takes precedence. Note that this field cannot be set when
              spec.os.name is linux.
              
              WindowsSecurityContextOptions contain Windows-specific options and
              credentials.
              
              

              • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
                (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
                the GMSA credential spec named by the GMSACredentialSpecName field.
                
              • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
                
              • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
                container. This field is alpha-level and will only be honored by components
                that enable the WindowsHostProcessContainers feature flag. Setting this
                field without the feature flag will result in errors when validating the
                Pod. All of a Pod's containers must have the same effective HostProcess
                value (it is not allowed to have a mix of HostProcess containers and
                non-HostProcess containers). In addition, if HostProcess is true then
                HostNetwork must also be set to true.
                
              • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
                Defaults to the user specified in image metadata if unspecified. May also
                be set in PodSecurityContext. If set in both SecurityContext and
                PodSecurityContext, the value specified in SecurityContext takes
                precedence.
                
          • startupProbe (Object) StartupProbe indicates that the Pod has successfully initialized. If
            specified, no other probes are executed until this completes successfully.
            If this probe fails, the Pod will be restarted, just as if the
            livenessProbe failed. This can be used to provide different probe
            parameters at the beginning of a Pod's lifecycle, when it might take a long
            time to load data or warm a cache, than during steady-state operation. This
            cannot be updated. More info:
            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
            
            Probe describes a health check to be performed against a container to
            determine whether it is alive or ready to receive traffic.
            
            

            • exec (Object) Exec specifies the action to take.
              
              ExecAction describes a "run in container" action.
              
              

              • command ([]string) Command is the command line to execute inside the container, the working
                directory for the command is root ('/') in the container's filesystem. The
                command is simply exec'd, it is not run inside a shell, so traditional
                shell instructions ('|', etc) won't work. To use a shell, you need to
                explicitly call out to that shell. Exit status of 0 is treated as
                live/healthy and non-zero is unhealthy.
                
            • failureThreshold (integer) Minimum consecutive failures for the probe to be considered failed after
              having succeeded. Defaults to 3. Minimum value is 1.
              
            • grpc (Object) GRPC specifies an action involving a GRPC port. This is an alpha field and
              requires enabling GRPCContainerProbe feature gate.
              
              

              • port (integer) Port number of the gRPC service. Number must be in the range 1 to 65535.
                
              • service (string) Service is the name of the service to place in the gRPC HealthCheckRequest
                (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
                
                If this is not specified, the default behavior is defined by gRPC.
                
            • httpGet (Object) HTTPGet specifies the http request to perform.
              
              HTTPGetAction describes an action based on HTTP Get requests.
              
              

              • host (string) Host name to connect to, defaults to the pod IP. You probably want to set
                "Host" in httpHeaders instead.
                
              • httpHeaders ([]Object) Custom headers to set in the request. HTTP allows repeated headers.
                
                HTTPHeader describes a custom header to be used in HTTP probes
                
                

                • name (string) The header field name
                  
                • value (string) The header field value
                  
              • path (string) Path to access on the HTTP server.
                
              • port (string) Name or number of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
              • scheme (string) Scheme to use for connecting to the host. Defaults to HTTP.
                
                
            • initialDelaySeconds (integer) Number of seconds after the container has started before liveness probes
              are initiated. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
            • periodSeconds (integer) How often (in seconds) to perform the probe. Default to 10 seconds. Minimum
              value is 1.
              
            • successThreshold (integer) Minimum consecutive successes for the probe to be considered successful
              after having failed. Defaults to 1. Must be 1 for liveness and startup.
              Minimum value is 1.
              
            • tcpSocket (Object) TCPSocket specifies an action involving a TCP port.
              
              TCPSocketAction describes an action based on opening a socket
              
              

              • host (string) Optional: Host name to connect to, defaults to the pod IP.
                
              • port (string) Number or name of the port to access on the container. Number must be in
                the range 1 to 65535. Name must be an IANA_SVC_NAME.
                
                IntOrString is a type that can hold an int32 or a string. When used in JSON
                or YAML marshalling and unmarshalling, it produces or consumes the inner
                type. This allows you to have, for example, a JSON field that can accept a
                name or number.
                
            • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully upon
              probe failure. The grace period is the duration in seconds after the
              processes running in the pod are sent a termination signal and the time
              when the processes are forcibly halted with a kill signal. Set this value
              longer than the expected cleanup time for your process. If this value is
              nil, the pod's terminationGracePeriodSeconds will be used. Otherwise, this
              value overrides the value provided by the pod spec. Value must be
              non-negative integer. The value zero indicates stop immediately via the
              kill signal (no opportunity to shut down). This is a beta field and
              requires enabling ProbeTerminationGracePeriod feature gate. Minimum value
              is 1. spec.terminationGracePeriodSeconds is used if unset.
              
            • timeoutSeconds (integer) Number of seconds after which the probe times out. Defaults to 1 second.
              Minimum value is 1. More info:
              https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes
              
          • stdin (boolean) Whether this container should allocate a buffer for stdin in the container
            runtime. If this is not set, reads from stdin in the container will always
            result in EOF. Default is false.
            
          • stdinOnce (boolean) Whether the container runtime should close the stdin channel after it has
            been opened by a single attach. When stdin is true the stdin stream will
            remain open across multiple attach sessions. If stdinOnce is set to true,
            stdin is opened on container start, is empty until the first client
            attaches to stdin, and then remains open and accepts data until the client
            disconnects, at which time stdin is closed and remains closed until the
            container is restarted. If this flag is false, a container processes that
            reads from stdin will never receive an EOF. Default is false
            
          • terminationMessagePath (string) Optional: Path at which the file to which the container's termination
            message will be written is mounted into the container's filesystem. Message
            written is intended to be brief final status, such as an assertion failure
            message. Will be truncated by the node if greater than 4096 bytes. The
            total message length across all containers will be limited to 12kb.
            Defaults to /dev/termination-log. Cannot be updated.
            
          • terminationMessagePolicy (string) Indicate how the termination message should be populated. File will use the
            contents of terminationMessagePath to populate the container status message
            on both success and failure. FallbackToLogsOnError will use the last chunk
            of container log output if the termination message file is empty and the
            container exited with an error. The log output is limited to 2048 bytes or
            80 lines, whichever is smaller. Defaults to File. Cannot be updated.
            
            
            
          • tty (boolean) Whether this container should allocate a TTY for itself, also requires
            'stdin' to be true. Default is false.
            
          • volumeDevices ([]Object) volumeDevices is the list of block devices to be used by the container.
            
            volumeDevice describes a mapping of a raw block device within a container.
            
            

            • devicePath (string) devicePath is the path inside of the container that the device will be
              mapped to.
              
            • name (string) name must match the name of a persistentVolumeClaim in the pod
              
          • volumeMounts ([]Object) Pod volumes to mount into the container's filesystem. Cannot be updated.
            
            VolumeMount describes a mounting of a Volume within a container.
            
            

            • mountPath (string) Path within the container at which the volume should be mounted. Must not
              contain ':'.
              
            • mountPropagation (string) mountPropagation determines how mounts are propagated from the host to
              container and the other way around. When not set, MountPropagationNone is
              used. This field is beta in 1.10.
              
            • name (string) This must match the Name of a Volume.
              
            • readOnly (boolean) Mounted read-only if true, read-write otherwise (false or unspecified).
              Defaults to false.
              
            • subPath (string) Path within the volume from which the container's volume should be mounted.
              Defaults to "" (volume's root).
              
            • subPathExpr (string) Expanded path within the volume from which the container's volume should be
              mounted. Behaves similarly to SubPath but environment variable references
              $(VAR_NAME) are expanded using the container's environment. Defaults to ""
              (volume's root). SubPathExpr and SubPath are mutually exclusive.
              
          • workingDir (string) Container's working directory. If not specified, the container runtime's
            default will be used, which might be configured in the container image.
            Cannot be updated.
            
        • nodeName (string) NodeName is a request to schedule this pod onto a specific node. If it is
          non-empty, the scheduler simply schedules this pod onto that node, assuming
          that it fits resource requirements.
          
        • nodeSelector (map[string]string) NodeSelector is a selector which must be true for the pod to fit on a node.
          Selector which must match a node's labels for the pod to be scheduled on
          that node. More info:
          https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
          
        • os (Object) Specifies the OS of the containers in the pod. Some pod and container
          fields are restricted if this is set.
          
          If the OS field is set to linux, the following fields must be unset:
          -securityContext.windowsOptions
          
          If the OS field is set to windows, following fields must be unset: -
          spec.hostPID - spec.hostIPC - spec.securityContext.seLinuxOptions -
          spec.securityContext.seccompProfile - spec.securityContext.fsGroup -
          spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls -
          spec.shareProcessNamespace - spec.securityContext.runAsUser -
          spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups -
          spec.containers[*].securityContext.seLinuxOptions -
          spec.containers[*].securityContext.seccompProfile -
          spec.containers[*].securityContext.capabilities -
          spec.containers[*].securityContext.readOnlyRootFilesystem -
          spec.containers[*].securityContext.privileged -
          spec.containers[*].securityContext.allowPrivilegeEscalation -
          spec.containers[*].securityContext.procMount -
          spec.containers[*].securityContext.runAsUser -
          spec.containers[*].securityContext.runAsGroup This is an alpha field and
          requires the IdentifyPodOS feature
          
          PodOS defines the OS parameters of a pod.
          
          

          • name (string) Name is the name of the operating system. The currently supported values
            are linux and windows. Additional value may be defined in future and can be
            one of:
            https://github.com/opencontainers/runtime-spec/blob/master/config.md#platform-specific-configuration
            Clients should expect to handle additional values and treat unrecognized
            values in this field as os: null
            
        • overhead (map[string]string) Overhead represents the resource overhead associated with running a pod for
          a given RuntimeClass. This field will be autopopulated at admission time by
          the RuntimeClass admission controller. If the RuntimeClass admission
          controller is enabled, overhead must not be set in Pod create requests. The
          RuntimeClass admission controller will reject Pod create requests which
          have the overhead already set. If RuntimeClass is configured and selected
          in the PodSpec, Overhead will be set to the value defined in the
          corresponding RuntimeClass, otherwise it will remain unset and treated as
          zero. More info:
          https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md
          This field is beta-level as of Kubernetes v1.18, and is only honored by
          servers that enable the PodOverhead feature.
          
          Quantity is a fixed-point representation of a number. It provides
          convenient marshaling/unmarshaling in JSON and YAML, in addition to
          String() and AsInt64() accessors.
          
          The serialization format is:
          
          (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
          from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
          (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
          (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
          (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
          (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
          See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
          | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
          choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
          (signedNumber)
          
          No matter which of the three exponent forms is used, no quantity may
          represent a number greater than 2^63-1 in magnitude, nor may it have more
          than 3 decimal places. Numbers larger or more precise will be capped or
          rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
          future if we require larger or smaller quantities.
          
          When a Quantity is parsed from a string, it will remember the type of
          suffix it had, and will use the same type again when it is serialized.
          
          Before serializing, Quantity will be put in "canonical form". This means
          that Exponent/suffix will be adjusted up or down (with a corresponding
          increase or decrease in Mantissa) such that:
          a. No precision is lost b. No fractional digits will be emitted c. The
          exponent (or suffix) is as large as possible. The sign will be omitted
          unless the number is negative.
          
          Examples:
          1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
          
          Note that the quantity will NEVER be internally represented by a floating
          point number. That is the whole point of this exercise.
          
          Non-canonical values will still parse as long as they are well formed, but
          will be re-emitted in their canonical form. (So always use canonical form,
          or don't diff.)
          
          This format is intended to make it difficult to use these numbers without
          writing some sort of special handling code in the hopes that that will
          cause implementors to also use a fixed point implementation.
          
        • preemptionPolicy (string) PreemptionPolicy is the Policy for preempting pods with lower priority. One
          of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset.
          This field is beta-level, gated by the NonPreemptingPriority feature-gate.
          
        • priority (integer) The priority value. Various system components use this field to find the
          priority of the pod. When Priority Admission Controller is enabled, it
          prevents users from setting this field. The admission controller populates
          this field from PriorityClassName. The higher the value, the higher the
          priority.
          
        • priorityClassName (string) If specified, indicates the pod's priority. "system-node-critical" and
          "system-cluster-critical" are two special keywords which indicate the
          highest priorities with the former being the highest priority. Any other
          name must be defined by creating a PriorityClass object with that name. If
          not specified, the pod priority will be default or zero if there is no
          default.
          
        • readinessGates ([]Object) If specified, all readiness gates will be evaluated for pod readiness. A
          pod is ready when all its containers are ready AND all conditions specified
          in the readiness gates have status equal to "True" More info:
          https://git.k8s.io/enhancements/keps/sig-network/580-pod-readiness-gates
          
          PodReadinessGate contains the reference to a pod condition
          
          

          • conditionType (string) ConditionType refers to a condition in the pod's condition list with
            matching type.
            
            
            
        • restartPolicy (string) Restart policy for all containers within the pod. One of Always, OnFailure,
          Never. Default to Always. More info:
          https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#restart-policy
          
          
          
        • runtimeClassName (string) RuntimeClassName refers to a RuntimeClass object in the node.k8s.io group,
          which should be used to run this pod. If no RuntimeClass resource matches
          the named class, the pod will not be run. If unset or empty, the "legacy"
          RuntimeClass will be used, which is an implicit class with an empty
          definition that uses the default runtime handler. More info:
          https://git.k8s.io/enhancements/keps/sig-node/585-runtime-class This is a
          beta feature as of Kubernetes v1.14.
          
        • schedulerName (string) If specified, the pod will be dispatched by specified scheduler. If not
          specified, the pod will be dispatched by default scheduler.
          
        • securityContext (Object) SecurityContext holds pod-level security attributes and common container
          settings. Optional: Defaults to empty. See type description for default
          values of each field.
          
          PodSecurityContext holds pod-level security attributes and common container
          settings. Some fields are also present in container.securityContext. Field
          values of container.securityContext take precedence over field values of
          PodSecurityContext.
          
          

          • fsGroup (integer) A special supplemental group that applies to all containers in a pod. Some
            volume types allow the Kubelet to change the ownership of that volume to be
            owned by the pod:
            
            1. The owning GID will be the FSGroup 2. The setgid bit is set (new files
            created in the volume will be owned by FSGroup) 3. The permission bits are
            OR'd with rw-rw----
            
            If unset, the Kubelet will not modify the ownership and permissions of any
            volume. Note that this field cannot be set when spec.os.name is windows.
            
          • fsGroupChangePolicy (string) fsGroupChangePolicy defines behavior of changing ownership and permission
            of the volume before being exposed inside Pod. This field will only apply
            to volume types which support fsGroup based ownership(and permissions). It
            will have no effect on ephemeral volume types such as: secret, configmaps
            and emptydir. Valid values are "OnRootMismatch" and "Always". If not
            specified, "Always" is used. Note that this field cannot be set when
            spec.os.name is windows.
            
          • runAsGroup (integer) The GID to run the entrypoint of the container process. Uses runtime
            default if unset. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
          • runAsNonRoot (boolean) Indicates that the container must run as a non-root user. If true, the
            Kubelet will validate the image at runtime to ensure that it does not run
            as UID 0 (root) and fail to start the container if it does. If unset or
            false, no such validation will be performed. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence.
            
          • runAsUser (integer) The UID to run the entrypoint of the container process. Defaults to user
            specified in image metadata if unspecified. May also be set in
            SecurityContext. If set in both SecurityContext and PodSecurityContext, the
            value specified in SecurityContext takes precedence for that container.
            Note that this field cannot be set when spec.os.name is windows.
            
          • seLinuxOptions (Object) The SELinux context to be applied to all containers. If unspecified, the
            container runtime will allocate a random SELinux context for each
            container. May also be set in SecurityContext. If set in both
            SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence for that container. Note that this field
            cannot be set when spec.os.name is windows.
            
            SELinuxOptions are the labels to be applied to the container
            
            

            • level (string) Level is SELinux level label that applies to the container.
              
            • role (string) Role is a SELinux role label that applies to the container.
              
            • type (string) Type is a SELinux type label that applies to the container.
              
            • user (string) User is a SELinux user label that applies to the container.
              
          • seccompProfile (Object) The seccomp options to use by the containers in this pod. Note that this
            field cannot be set when spec.os.name is windows.
            
            SeccompProfile defines a pod/container's seccomp profile settings. Only one
            profile source may be set.
            
            

            • localhostProfile (string) localhostProfile indicates a profile defined in a file on the node should
              be used. The profile must be preconfigured on the node to work. Must be a
              descending path, relative to the kubelet's configured seccomp profile
              location. Must only be set if type is "Localhost".
              
            • type (string) type indicates which kind of seccomp profile will be applied. Valid options
              are:
              
              Localhost - a profile defined in a file on the node should be used.
              RuntimeDefault - the container runtime default profile should be used.
              Unconfined - no profile should be applied.
              
              
              
          • supplementalGroups ([]integer) A list of groups applied to the first process run in each container, in
            addition to the container's primary GID. If unspecified, no groups will be
            added to any container. Note that this field cannot be set when
            spec.os.name is windows.
            
          • sysctls ([]Object) Sysctls hold a list of namespaced sysctls used for the pod. Pods with
            unsupported sysctls (by the container runtime) might fail to launch. Note
            that this field cannot be set when spec.os.name is windows.
            
            Sysctl defines a kernel parameter to be set
            
            

            • name (string) Name of a property to set
              
            • value (string) Value of a property to set
              
          • windowsOptions (Object) The Windows specific settings applied to all containers. If unspecified,
            the options within a container's SecurityContext will be used. If set in
            both SecurityContext and PodSecurityContext, the value specified in
            SecurityContext takes precedence. Note that this field cannot be set when
            spec.os.name is linux.
            
            WindowsSecurityContextOptions contain Windows-specific options and
            credentials.
            
            

            • gmsaCredentialSpec (string) GMSACredentialSpec is where the GMSA admission webhook
              (https://github.com/kubernetes-sigs/windows-gmsa) inlines the contents of
              the GMSA credential spec named by the GMSACredentialSpecName field.
              
            • gmsaCredentialSpecName (string) GMSACredentialSpecName is the name of the GMSA credential spec to use.
              
            • hostProcess (boolean) HostProcess determines if a container should be run as a 'Host Process'
              container. This field is alpha-level and will only be honored by components
              that enable the WindowsHostProcessContainers feature flag. Setting this
              field without the feature flag will result in errors when validating the
              Pod. All of a Pod's containers must have the same effective HostProcess
              value (it is not allowed to have a mix of HostProcess containers and
              non-HostProcess containers). In addition, if HostProcess is true then
              HostNetwork must also be set to true.
              
            • runAsUserName (string) The UserName in Windows to run the entrypoint of the container process.
              Defaults to the user specified in image metadata if unspecified. May also
              be set in PodSecurityContext. If set in both SecurityContext and
              PodSecurityContext, the value specified in SecurityContext takes
              precedence.
              
        • serviceAccount (string) DeprecatedServiceAccount is a depreciated alias for ServiceAccountName.
          Deprecated: Use serviceAccountName instead.
          
        • serviceAccountName (string) ServiceAccountName is the name of the ServiceAccount to use to run this
          pod. More info:
          https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
          
        • setHostnameAsFQDN (boolean) If true the pod's hostname will be configured as the pod's FQDN, rather
          than the leaf name (the default). In Linux containers, this means setting
          the FQDN in the hostname field of the kernel (the nodename field of struct
          utsname). In Windows containers, this means setting the registry value of
          hostname for the registry key
          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters to
          FQDN. If a pod does not have FQDN, this has no effect. Default to false.
          
        • shareProcessNamespace (boolean) Share a single process namespace between all of the containers in a pod.
          When this is set containers will be able to view and signal processes from
          other containers in the same pod, and the first process in each container
          will not be assigned PID 1. HostPID and ShareProcessNamespace cannot both
          be set. Optional: Default to false.
          
        • subdomain (string) If specified, the fully qualified Pod hostname will be
          "(hostname).(subdomain).(pod namespace).svc.(cluster domain)". If not
          specified, the pod will not have a domainname at all.
          
        • terminationGracePeriodSeconds (integer) Optional duration in seconds the pod needs to terminate gracefully. May be
          decreased in delete request. Value must be non-negative integer. The value
          zero indicates stop immediately via the kill signal (no opportunity to shut
          down). If this value is nil, the default grace period will be used instead.
          The grace period is the duration in seconds after the processes running in
          the pod are sent a termination signal and the time when the processes are
          forcibly halted with a kill signal. Set this value longer than the expected
          cleanup time for your process. Defaults to 30 seconds.
          
        • tolerations ([]Object) If specified, the pod's tolerations.
          
          The pod this Toleration is attached to tolerates any taint that matches the
          triple (key,value,effect) using the matching operator (operator).
          
          

          • effect (string) Effect indicates the taint effect to match. Empty means match all taint
            effects. When specified, allowed values are NoSchedule, PreferNoSchedule
            and NoExecute.
            
            
            
          • key (string) Key is the taint key that the toleration applies to. Empty means match all
            taint keys. If the key is empty, operator must be Exists; this combination
            means to match all values and all keys.
            
          • operator (string) Operator represents a key's relationship to the value. Valid operators are
            Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for
            value, so that a pod can tolerate all taints of a particular category.
            
            
            
          • tolerationSeconds (integer) TolerationSeconds represents the period of time the toleration (which must
            be of effect NoExecute, otherwise this field is ignored) tolerates the
            taint. By default, it is not set, which means tolerate the taint forever
            (do not evict). Zero and negative values will be treated as 0 (evict
            immediately) by the system.
            
          • value (string) Value is the taint value the toleration matches to. If the operator is
            Exists, the value should be empty, otherwise just a regular string.
            
        • topologySpreadConstraints ([]Object) TopologySpreadConstraints describes how a group of pods ought to spread
          across topology domains. Scheduler will schedule pods in a way which abides
          by the constraints. All topologySpreadConstraints are ANDed.
          
          TopologySpreadConstraint specifies how to spread matching pods among the
          given topology.
          
          

          • labelSelector (Object) LabelSelector is used to find matching pods. Pods that match this label
            selector are counted to determine the number of pods in their corresponding
            topology domain.
            
            A label selector is a label query over a set of resources. The result of
            matchLabels and matchExpressions are ANDed. An empty label selector matches
            all objects. A null label selector matches no objects.
            
            

            • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
              are ANDed.
              
              A label selector requirement is a selector that contains values, a key, and
              an operator that relates the key and values.
              
              

              • key (string) key is the label key that the selector applies to.
                
              • operator (string) operator represents a key's relationship to a set of values. Valid
                operators are In, NotIn, Exists and DoesNotExist.
                
              • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                values array must be non-empty. If the operator is Exists or DoesNotExist,
                the values array must be empty. This array is replaced during a strategic
                merge patch.
                
            • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
              matchLabels map is equivalent to an element of matchExpressions, whose key
              field is "key", the operator is "In", and the values array contains only
              "value". The requirements are ANDed.
              
          • maxSkew (integer) MaxSkew describes the degree to which pods may be unevenly distributed.
            When `whenUnsatisfiable=DoNotSchedule`, it is the maximum permitted
            difference between the number of matching pods in the target topology and
            the global minimum. For example, in a 3-zone cluster, MaxSkew is set to 1,
            and pods with the same labelSelector spread as 1/1/0: | zone1 | zone2 |
            zone3 | | P | P | | - if MaxSkew is 1, incoming pod can only be scheduled
            to zone3 to become 1/1/1; scheduling it onto zone1(zone2) would make the
            ActualSkew(2-0) on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2,
            incoming pod can be scheduled onto any zone. When
            `whenUnsatisfiable=ScheduleAnyway`, it is used to give higher precedence to
            topologies that satisfy it. It's a required field. Default value is 1 and 0
            is not allowed.
            
          • topologyKey (string) TopologyKey is the key of node labels. Nodes that have a label with this
            key and identical values are considered to be in the same topology. We
            consider each (key, value) as a "bucket", and try to put balanced number of
            pods into each bucket. It's a required field.
            
          • whenUnsatisfiable (string) WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy
            the spread constraint. - DoNotSchedule (default) tells the scheduler not to
            schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in
            any location, but giving higher precedence to topologies that would help
            reduce the skew. A constraint is considered "Unsatisfiable" for an incoming
            pod if and only if every possible node assignment for that pod would
            violate "MaxSkew" on some topology. For example, in a 3-zone cluster,
            MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1:
            | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to
            DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become
            3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In
            other words, the cluster can still be imbalanced, but scheduler won't make
            it *more* imbalanced. It's a required field.
            
            
            
        • volumes ([]Object) List of volumes that can be mounted by containers belonging to the pod.
          More info: https://kubernetes.io/docs/concepts/storage/volumes
          
          Volume represents a named volume in a pod that may be accessed by any
          container in the pod.
          
          

          • awsElasticBlockStore (Object) AWSElasticBlockStore represents an AWS Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
            
            Represents a Persistent Disk resource in AWS.
            An AWS EBS disk must exist before mounting to a container. The disk must
            also be in the same AWS zone as the kubelet. An AWS EBS disk can only be
            mounted as read/write once. AWS EBS volumes support ownership management
            and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty).
              
            • readOnly (boolean) Specify "true" to force and set the ReadOnly property in VolumeMounts to
              "true". If omitted, the default is "false". More info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
            • volumeID (string) Unique ID of the persistent disk resource in AWS (Amazon EBS volume). More
              info:
              https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
              
          • azureDisk (Object) AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            AzureDisk represents an Azure Data Disk mount on the host and bind mount to
            the pod.
            
            

            • cachingMode (string) Host Caching mode: None, Read Only, Read Write.
              
            • diskName (string) The Name of the data disk in the blob storage
              
            • diskURI (string) The URI the data disk in the blob storage
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • kind (string) Expected values Shared: multiple blob disks per storage account Dedicated:
              single blob disk per storage account Managed: azure managed data disk (only
              in managed availability set). defaults to shared
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
          • azureFile (Object) AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            AzureFile represents an Azure File Service mount on the host and bind mount
            to the pod.
            
            

            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretName (string) the name of secret that contains Azure Storage Account Name and Key
              
            • shareName (string) Share Name
              
          • cephfs (Object) CephFS represents a Ceph FS mount on the host that shares a pod's lifetime
            
            Represents a Ceph Filesystem mount that lasts the lifetime of a pod Cephfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • monitors ([]string) Required: Monitors is a collection of Ceph monitors More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • path (string) Optional: Used as the mounted root, rather than the full Ceph tree, default
              is /
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretFile (string) Optional: SecretFile is the path to key ring for User, default is
              /etc/ceph/user.secret More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
            • secretRef (Object) Optional: SecretRef is reference to the authentication secret for User,
              default is empty. More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) Optional: User is the rados user name, default is admin More info:
              https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it
              
          • cinder (Object) Cinder represents a cinder volume attached and mounted on kubelets host
            machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md
            
            Represents a cinder volume resource in Openstack. A Cinder volume must
            exist before mounting to a container. The volume must also be in the same
            region as the kubelet. Cinder volumes support ownership management and
            SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
              be "ext4" if unspecified. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
            • secretRef (Object) Optional: points to a secret object containing parameters used to connect
              to OpenStack.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeID (string) volume id used to identify the volume in cinder. More info:
              https://examples.k8s.io/mysql-cinder-pd/README.md
              
          • configMap (Object) ConfigMap represents a configMap that should populate this volume
            
            Adapts a ConfigMap into a volume.
            The contents of the target ConfigMap's Data field will be presented in a
            volume as files using the keys in the Data field as the file names, unless
            the items element is populated with specific mappings of keys to paths.
            ConfigMap volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              ConfigMap will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the ConfigMap, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • name (string) Name of the referent. More info:
              https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
              
            • optional (boolean) Specify whether the ConfigMap or its keys must be defined
              
          • csi (Object) CSI (Container Storage Interface) represents ephemeral storage that is
            handled by certain external CSI drivers (Beta feature).
            
            Represents a source location of a volume to mount, managed by an external
            CSI driver
            
            

            • driver (string) Driver is the name of the CSI driver that handles this volume. Consult with
              your admin for the correct name as registered in the cluster.
              
            • fsType (string) Filesystem type to mount. Ex. "ext4", "xfs", "ntfs". If not provided, the
              empty value is passed to the associated CSI driver which will determine the
              default filesystem to apply.
              
            • nodePublishSecretRef (Object) NodePublishSecretRef is a reference to the secret object containing
              sensitive information to pass to the CSI driver to complete the CSI
              NodePublishVolume and NodeUnpublishVolume calls. This field is optional,
              and may be empty if no secret is required. If the secret object contains
              more than one secret, all secret references are passed.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • readOnly (boolean) Specifies a read-only configuration for the volume. Defaults to false
              (read/write).
              
            • volumeAttributes (map[string]string) VolumeAttributes stores driver-specific properties that are passed to the
              CSI driver. Consult your driver's documentation for supported values.
              
          • downwardAPI (Object) DownwardAPI represents downward API about the pod that should populate this
            volume
            
            DownwardAPIVolumeSource represents a volume containing downward API info.
            Downward API volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits to use on created files by default. Must be a Optional:
              mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) Items is a list of downward API volume file
              
              DownwardAPIVolumeFile represents information to create the file containing
              the pod field
              
              

              • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                namespace are supported.
                
                ObjectFieldSelector selects an APIVersioned field of an object.
                
                

                • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                  "v1".
                  
                • fieldPath (string) Path of the field to select in the specified API version.
                  
              • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) Required: Path is the relative path name of the file to be created. Must
                not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                item of the relative path must not start with '..'
                
              • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                supported.
                
                ResourceFieldSelector represents container resources (cpu, memory) and
                their output format
                
                

                • containerName (string) Container name: required for volumes, optional for env vars
                  
                • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                  
                  Quantity is a fixed-point representation of a number. It provides
                  convenient marshaling/unmarshaling in JSON and YAML, in addition to
                  String() and AsInt64() accessors.
                  
                  The serialization format is:
                  
                  (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                  from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                  (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                  (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                  (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                  (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                  See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                  | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                  choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                  (signedNumber)
                  
                  No matter which of the three exponent forms is used, no quantity may
                  represent a number greater than 2^63-1 in magnitude, nor may it have more
                  than 3 decimal places. Numbers larger or more precise will be capped or
                  rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                  future if we require larger or smaller quantities.
                  
                  When a Quantity is parsed from a string, it will remember the type of
                  suffix it had, and will use the same type again when it is serialized.
                  
                  Before serializing, Quantity will be put in "canonical form". This means
                  that Exponent/suffix will be adjusted up or down (with a corresponding
                  increase or decrease in Mantissa) such that:
                  a. No precision is lost b. No fractional digits will be emitted c. The
                  exponent (or suffix) is as large as possible. The sign will be omitted
                  unless the number is negative.
                  
                  Examples:
                  1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                  
                  Note that the quantity will NEVER be internally represented by a floating
                  point number. That is the whole point of this exercise.
                  
                  Non-canonical values will still parse as long as they are well formed, but
                  will be re-emitted in their canonical form. (So always use canonical form,
                  or don't diff.)
                  
                  This format is intended to make it difficult to use these numbers without
                  writing some sort of special handling code in the hopes that that will
                  cause implementors to also use a fixed point implementation.
                  
                • resource (string) Required: resource to select
                  
          • emptyDir (Object) EmptyDir represents a temporary directory that shares a pod's lifetime.
            More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
            
            Represents an empty directory for a pod. Empty directory volumes support
            ownership management and SELinux relabeling.
            
            

            • medium (string) What type of storage medium should back this directory. The default is ""
              which means to use the node's default medium. Must be an empty string
              (default) or Memory. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              
            • sizeLimit (string) Total amount of local storage required for this EmptyDir volume. The size
              limit is also applicable for memory medium. The maximum usage on memory
              medium EmptyDir would be the minimum value between the SizeLimit specified
              here and the sum of memory limits of all containers in a pod. The default
              is nil which means that the limit is undefined. More info:
              http://kubernetes.io/docs/user-guide/volumes#emptydir
              
              Quantity is a fixed-point representation of a number. It provides
              convenient marshaling/unmarshaling in JSON and YAML, in addition to
              String() and AsInt64() accessors.
              
              The serialization format is:
              
              (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
              from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
              (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
              (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
              (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
              (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
              See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
              | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
              choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
              (signedNumber)
              
              No matter which of the three exponent forms is used, no quantity may
              represent a number greater than 2^63-1 in magnitude, nor may it have more
              than 3 decimal places. Numbers larger or more precise will be capped or
              rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
              future if we require larger or smaller quantities.
              
              When a Quantity is parsed from a string, it will remember the type of
              suffix it had, and will use the same type again when it is serialized.
              
              Before serializing, Quantity will be put in "canonical form". This means
              that Exponent/suffix will be adjusted up or down (with a corresponding
              increase or decrease in Mantissa) such that:
              a. No precision is lost b. No fractional digits will be emitted c. The
              exponent (or suffix) is as large as possible. The sign will be omitted
              unless the number is negative.
              
              Examples:
              1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
              
              Note that the quantity will NEVER be internally represented by a floating
              point number. That is the whole point of this exercise.
              
              Non-canonical values will still parse as long as they are well formed, but
              will be re-emitted in their canonical form. (So always use canonical form,
              or don't diff.)
              
              This format is intended to make it difficult to use these numbers without
              writing some sort of special handling code in the hopes that that will
              cause implementors to also use a fixed point implementation.
              
          • ephemeral (Object) Ephemeral represents a volume that is handled by a cluster storage driver.
            The volume's lifecycle is tied to the pod that defines it - it will be
            created before the pod starts, and deleted when the pod is removed.
            
            Use this if: a) the volume is only needed while the pod runs, b) features
            of normal volumes like restoring from snapshot or capacity tracking are
            needed, c) the storage driver is specified through a storage class, and d)
            the storage driver supports dynamic volume provisioning through a
            PersistentVolumeClaim (see EphemeralVolumeSource for more information on
            the connection between this volume type and PersistentVolumeClaim).
            
            Use PersistentVolumeClaim or one of the vendor-specific APIs for volumes
            that persist for longer than the lifecycle of an individual pod.
            
            Use CSI for light-weight local ephemeral volumes if the CSI driver is meant
            to be used that way - see the documentation of the driver for more
            information.
            
            A pod can use both types of ephemeral volumes and persistent volumes at the
            same time.
            
            Represents an ephemeral volume that is handled by a normal storage driver.
            
            

            • volumeClaimTemplate (Object) Will be used to create a stand-alone PVC to provision the volume. The pod
              in which this EphemeralVolumeSource is embedded will be the owner of the
              PVC, i.e. the PVC will be deleted together with the pod. The name of the
              PVC will be `(pod name)-(volume name)` where `(volume name)` is the name
              from the `PodSpec.Volumes` array entry. Pod validation will reject the pod
              if the concatenated name is not valid for a PVC (for example, too long).
              
              An existing PVC with that name that is not owned by the pod will *not* be
              used for the pod to avoid using an unrelated volume by mistake. Starting
              the pod is then blocked until the unrelated PVC is removed. If such a
              pre-created PVC is meant to be used by the pod, the PVC has to updated with
              an owner reference to the pod once the pod exists. Normally this should not
              be necessary, but it may be useful when manually reconstructing a broken
              cluster.
              
              This field is read-only and no changes will be made by Kubernetes to the
              PVC after it has been created.
              
              Required, must not be nil.
              
              PersistentVolumeClaimTemplate is used to produce PersistentVolumeClaim
              objects as part of an EphemeralVolumeSource.
              
              

              • metadata (Object) May contain labels and annotations that will be copied into the PVC when
                creating it. No other fields are allowed and will be rejected during
                validation.
                
                ObjectMeta is metadata that all persisted resources must have, which
                includes all objects users must create.
                
                

                • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
                  may be set by external tools to store and retrieve arbitrary metadata. They
                  are not queryable and should be preserved when modifying objects. More
                  info: http://kubernetes.io/docs/user-guide/annotations
                  
                • clusterName (string) The name of the cluster which the object belongs to. This is used to
                  distinguish resources with same name and namespace in different clusters.
                  This field is not set anywhere right now and apiserver is going to ignore
                  it if set in create or update request.
                  
                • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
                  object was created. It is not guaranteed to be set in happens-before order
                  across separate operations. Clients may not set this value. It is
                  represented in RFC3339 form and is in UTC.
                  
                  Populated by the system. Read-only. Null for lists. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
                  will be removed from the system. Only set when deletionTimestamp is also
                  set. May only be shortened. Read-only.
                  
                • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
                  deleted. This field is set by the server when a graceful deletion is
                  requested by the user, and is not directly settable by a client. The
                  resource is expected to be deleted (no longer visible from resource lists,
                  and not reachable by name) after the time in this field, once the
                  finalizers list is empty. As long as the finalizers list contains items,
                  deletion is blocked. Once the deletionTimestamp is set, this value may not
                  be unset or be set further into the future, although it may be shortened or
                  the resource may be deleted prior to this time. For example, a user may
                  request that a pod is deleted in 30 seconds. The Kubelet will react by
                  sending a graceful termination signal to the containers in the pod. After
                  that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
                  to the container and after cleanup, remove the pod from the API. In the
                  presence of network partitions, this object may still exist after this
                  timestamp, until an administrator or automated process can determine the
                  resource is fully terminated. If not set, graceful deletion of the object
                  has not been requested.
                  
                  Populated by the system when a graceful deletion is requested. Read-only.
                  More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
                  
                  Time is a wrapper around time.Time which supports correct marshaling to
                  YAML and JSON. Wrappers are provided for many of the factory methods that
                  the time package offers.
                  
                • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
                  an identifier for the responsible component that will remove the entry from
                  the list. If the deletionTimestamp of the object is non-nil, entries in
                  this list can only be removed. Finalizers may be processed and removed in
                  any order. Order is NOT enforced because it introduces significant risk of
                  stuck finalizers. finalizers is a shared field, any actor with permission
                  can reorder it. If the finalizer list is processed in order, then this can
                  lead to a situation in which the component responsible for the first
                  finalizer in the list is waiting for a signal (field value, external
                  system, or other) produced by a component responsible for a finalizer later
                  in the list, resulting in a deadlock. Without enforced ordering finalizers
                  are free to order amongst themselves and are not vulnerable to ordering
                  changes in the list.
                  
                • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
                  unique name ONLY IF the Name field has not been provided. If this field is
                  used, the name returned to the client will be different than the name
                  passed. This value will also be combined with a unique suffix. The provided
                  value has the same validation rules as the Name field, and may be truncated
                  by the length of the suffix required to make the value unique on the
                  server.
                  
                  If this field is specified and the generated name exists, the server will
                  NOT return a 409 - instead, it will either return 201 Created or 500 with
                  Reason ServerTimeout indicating a unique name could not be found in the
                  time allotted, and the client should retry (optionally after the time
                  indicated in the Retry-After header).
                  
                  Applied only if Name is not specified. More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
                  
                • generation (integer) A sequence number representing a specific generation of the desired state.
                  Populated by the system. Read-only.
                  
                • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
                  (scope and select) objects. May match selectors of replication controllers
                  and services. More info: http://kubernetes.io/docs/user-guide/labels
                  
                • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
                  managed by that workflow. This is mostly for internal housekeeping, and
                  users typically shouldn't need to set or understand this field. A workflow
                  can be the user's name, a controller's name, or the name of a specific
                  apply path like "ci-cd". The set of fields is always in the version that
                  the workflow used when modifying the object.
                  
                  ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
                  the resource that the fieldset applies to.
                  
                  

                  • apiVersion (string) APIVersion defines the version of this resource that this field set applies
                    to. The format is "group/version" just like the top-level APIVersion field.
                    It is necessary to track the version of a field set because it cannot be
                    automatically converted.
                    
                  • fieldsType (string) FieldsType is the discriminator for the different fields format and
                    version. There is currently only one possible value: "FieldsV1"
                    
                  • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
                    type.
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                    FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
                    format.
                    
                    Each key is either a '.' representing the field itself, and will always map
                    to an empty set, or a string representing a sub-field or item. The string
                    will follow one of these four formats: 'f:(name)', where (name) is the name
                    of a field in a struct, or key in a map 'v:(value)', where (value) is the
                    exact json formatted value of a list item 'i:(index)', where (index) is
                    position of a item in a list 'k:(keys)', where (keys) is a map of a list
                    item's key fields to their unique values If a key maps to an empty Fields
                    value, the field that key represents is part of the set.
                    
                    The exact format is defined in sigs.k8s.io/structured-merge-diff
                    
                  • manager (string) Manager is an identifier of the workflow managing these fields.
                    
                  • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
                    being created. The only valid values for this field are 'Apply' and
                    'Update'.
                    
                  • subresource (string) Subresource is the name of the subresource used to update that object, or
                    empty string if the object was updated through the main resource. The value
                    of this field is used to distinguish between managers, even if they share
                    the same name. For example, a status update will be distinct from a regular
                    update using the same manager name. Note that the APIVersion field is not
                    related to the Subresource field and it always corresponds to the version
                    of the main resource.
                    
                  • time (string) Time is timestamp of when these fields were set. It should always be empty
                    if Operation is 'Apply'
                    
                    Time is a wrapper around time.Time which supports correct marshaling to
                    YAML and JSON. Wrappers are provided for many of the factory methods that
                    the time package offers.
                    
                • name (string) Name must be unique within a namespace. Is required when creating
                  resources, although some resources may allow a client to request the
                  generation of an appropriate name automatically. Name is primarily intended
                  for creation idempotence and configuration definition. Cannot be updated.
                  More info: http://kubernetes.io/docs/user-guide/identifiers#names
                  
                • namespace (string) Namespace defines the space within which each name must be unique. An empty
                  namespace is equivalent to the "default" namespace, but "default" is the
                  canonical representation. Not all objects are required to be scoped to a
                  namespace - the value of this field for those objects will be empty.
                  
                  Must be a DNS_LABEL. Cannot be updated. More info:
                  http://kubernetes.io/docs/user-guide/namespaces
                  
                • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
                  been deleted, this object will be garbage collected. If this object is
                  managed by a controller, then an entry in this list will point to this
                  controller, with the controller field set to true. There cannot be more
                  than one managing controller.
                  
                  OwnerReference contains enough information to let you identify an owning
                  object. An owning object must be in the same namespace as the dependent, or
                  be cluster-scoped, so there is no namespace field.
                  
                  

                  • apiVersion (string) API version of the referent.
                    
                  • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
                    owner cannot be deleted from the key-value store until this reference is
                    removed. Defaults to false. To set this field, a user needs "delete"
                    permission of the owner, otherwise 422 (Unprocessable Entity) will be
                    returned.
                    
                  • controller (boolean) If true, this reference points to the managing controller.
                    
                  • kind (string) Kind of the referent. More info:
                    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
                    
                  • name (string) Name of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#names
                    
                  • uid (string) UID of the referent. More info:
                    http://kubernetes.io/docs/user-guide/identifiers#uids
                    
                • resourceVersion (string) An opaque value that represents the internal version of this object that
                  can be used by clients to determine when objects have changed. May be used
                  for optimistic concurrency, change detection, and the watch operation on a
                  resource or set of resources. Clients must treat these values as opaque and
                  passed unmodified back to the server. They may only be valid for a
                  particular resource or set of resources.
                  
                  Populated by the system. Read-only. Value must be treated as opaque by
                  clients and . More info:
                  https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
                  
                • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
                  Read-only.
                  
                  DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
                  the field is planned to be removed in 1.21 release.
                  
                • uid (string) UID is the unique in time and space value for this object. It is typically
                  generated by the server on successful creation of a resource and is not
                  allowed to change on PUT operations.
                  
                  Populated by the system. Read-only. More info:
                  http://kubernetes.io/docs/user-guide/identifiers#uids
                  
              • spec (Object) The specification for the PersistentVolumeClaim. The entire content is
                copied unchanged into the PVC that gets created from this template. The
                same fields as in a PersistentVolumeClaim are also valid here.
                
                PersistentVolumeClaimSpec describes the common attributes of storage
                devices and allows a Source for provider-specific attributes
                
                

                • accessModes ([]string) AccessModes contains the desired access modes the volume should have. More
                  info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
                  
                • dataSource (Object) This field can be used to specify either: * An existing VolumeSnapshot
                  object (snapshot.storage.k8s.io/VolumeSnapshot) * An existing PVC
                  (PersistentVolumeClaim) If the provisioner or an external controller can
                  support the specified data source, it will create a new volume based on the
                  contents of the specified data source. If the AnyVolumeDataSource feature
                  gate is enabled, this field will always have the same contents as the
                  DataSourceRef field.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • dataSourceRef (Object) Specifies the object from which to populate the volume with data, if a
                  non-empty volume is desired. This may be any local object from a non-empty
                  API group (non core object) or a PersistentVolumeClaim object. When this
                  field is specified, volume binding will only succeed if the type of the
                  specified object matches some installed volume populator or dynamic
                  provisioner. This field will replace the functionality of the DataSource
                  field and as such if both fields are non-empty, they must have the same
                  value. For backwards compatibility, both fields (DataSource and
                  DataSourceRef) will be set to the same value automatically if one of them
                  is empty and the other is non-empty. There are two important differences
                  between DataSource and DataSourceRef: * While DataSource only allows two
                  specific types of objects, DataSourceRef allows any non-core object, as
                  well as PersistentVolumeClaim objects.
                  * While DataSource ignores disallowed values (dropping them), DataSourceRef
                  preserves all values, and generates an error if a disallowed value is
                  specified. (Alpha) Using this field requires the AnyVolumeDataSource
                  feature gate to be enabled.
                  
                  TypedLocalObjectReference contains enough information to let you locate the
                  typed referenced object inside the same namespace.
                  
                  

                  • apiGroup (string) APIGroup is the group for the resource being referenced. If APIGroup is not
                    specified, the specified Kind must be in the core API group. For any other
                    third-party types, APIGroup is required.
                    
                  • kind (string) Kind is the type of resource being referenced
                    
                  • name (string) Name is the name of resource being referenced
                    
                • resources (Object) Resources represents the minimum resources the volume should have. If
                  RecoverVolumeExpansionFailure feature is enabled users are allowed to
                  specify resource requirements that are lower than previous value but must
                  still be higher than capacity recorded in the status field of the claim.
                  More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
                  
                  ResourceRequirements describes the compute resource requirements.
                  
                  

                  • limits (map[string]string) Limits describes the maximum amount of compute resources allowed. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                  • requests (map[string]string) Requests describes the minimum amount of compute resources required. If
                    Requests is omitted for a container, it defaults to Limits if that is
                    explicitly specified, otherwise to an implementation-defined value. More
                    info:
                    https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                    
                    Quantity is a fixed-point representation of a number. It provides
                    convenient marshaling/unmarshaling in JSON and YAML, in addition to
                    String() and AsInt64() accessors.
                    
                    The serialization format is:
                    
                    (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                    from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                    (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                    (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                    (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                    (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                    See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                    | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                    choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                    (signedNumber)
                    
                    No matter which of the three exponent forms is used, no quantity may
                    represent a number greater than 2^63-1 in magnitude, nor may it have more
                    than 3 decimal places. Numbers larger or more precise will be capped or
                    rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                    future if we require larger or smaller quantities.
                    
                    When a Quantity is parsed from a string, it will remember the type of
                    suffix it had, and will use the same type again when it is serialized.
                    
                    Before serializing, Quantity will be put in "canonical form". This means
                    that Exponent/suffix will be adjusted up or down (with a corresponding
                    increase or decrease in Mantissa) such that:
                    a. No precision is lost b. No fractional digits will be emitted c. The
                    exponent (or suffix) is as large as possible. The sign will be omitted
                    unless the number is negative.
                    
                    Examples:
                    1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                    
                    Note that the quantity will NEVER be internally represented by a floating
                    point number. That is the whole point of this exercise.
                    
                    Non-canonical values will still parse as long as they are well formed, but
                    will be re-emitted in their canonical form. (So always use canonical form,
                    or don't diff.)
                    
                    This format is intended to make it difficult to use these numbers without
                    writing some sort of special handling code in the hopes that that will
                    cause implementors to also use a fixed point implementation.
                    
                • selector (Object) A label query over volumes to consider for binding.
                  
                  A label selector is a label query over a set of resources. The result of
                  matchLabels and matchExpressions are ANDed. An empty label selector matches
                  all objects. A null label selector matches no objects.
                  
                  

                  • matchExpressions ([]Object) matchExpressions is a list of label selector requirements. The requirements
                    are ANDed.
                    
                    A label selector requirement is a selector that contains values, a key, and
                    an operator that relates the key and values.
                    
                    

                    • key (string) key is the label key that the selector applies to.
                      
                    • operator (string) operator represents a key's relationship to a set of values. Valid
                      operators are In, NotIn, Exists and DoesNotExist.
                      
                    • values ([]string) values is an array of string values. If the operator is In or NotIn, the
                      values array must be non-empty. If the operator is Exists or DoesNotExist,
                      the values array must be empty. This array is replaced during a strategic
                      merge patch.
                      
                  • matchLabels (map[string]string) matchLabels is a map of {key,value} pairs. A single {key,value} in the
                    matchLabels map is equivalent to an element of matchExpressions, whose key
                    field is "key", the operator is "In", and the values array contains only
                    "value". The requirements are ANDed.
                    
                • storageClassName (string) Name of the StorageClass required by the claim. More info:
                  https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
                  
                • volumeMode (string) volumeMode defines what type of volume is required by the claim. Value of
                  Filesystem is implied when not included in claim spec.
                  
                • volumeName (string) VolumeName is the binding reference to the PersistentVolume backing this
                  claim.
                  
          • fc (Object) FC represents a Fibre Channel resource that is attached to a kubelet's host
            machine and then exposed to the pod.
            
            Represents a Fibre Channel volume. Fibre Channel volumes can only be
            mounted as read/write once. Fibre Channel volumes support ownership
            management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • lun (integer) Optional: FC target lun number
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • targetWWNs ([]string) Optional: FC target worldwide names (WWNs)
              
            • wwids ([]string) Optional: FC volume world wide identifiers (wwids) Either wwids or
              combination of targetWWNs and lun must be set, but not both simultaneously.
              
          • flexVolume (Object) FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            FlexVolume represents a generic volume resource that is
            provisioned/attached using an exec based plugin.
            
            

            • driver (string) Driver is the name of the driver to use for this volume.
              
            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". The default filesystem depends
              on FlexVolume script.
              
            • options (map[string]string) Optional: Extra command options if any.
              
            • readOnly (boolean) Optional: Defaults to false (read/write). ReadOnly here will force the
              ReadOnly setting in VolumeMounts.
              
            • secretRef (Object) Optional: SecretRef is reference to the secret object containing sensitive
              information to pass to the plugin scripts. This may be empty if no secret
              object is specified. If the secret object contains more than one secret,
              all secrets are passed to the plugin scripts.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
          • flocker (Object) Flocker represents a Flocker volume attached to a kubelet's host machine.
            This depends on the Flocker control service being running
            
            Represents a Flocker volume mounted by the Flocker agent. One and only one
            of datasetName and datasetUUID should be set. Flocker volumes do not
            support ownership management or SELinux relabeling.
            
            

            • datasetName (string) Name of the dataset stored as metadata -) name on the dataset for Flocker
              should be considered as deprecated
              
            • datasetUUID (string) UUID of the dataset. This is unique identifier of a Flocker dataset
              
          • gcePersistentDisk (Object) GCEPersistentDisk represents a GCE Disk resource that is attached to a
            kubelet's host machine and then exposed to the pod. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
            
            Represents a Persistent Disk resource in Google Compute Engine.
            A GCE PD must exist before mounting to a container. The disk must also be
            in the same GCE project and zone as the kubelet. A GCE PD can only be
            mounted as read/write once or read-only many times. GCE PDs support
            ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • partition (integer) The partition in the volume that you want to mount. If omitted, the default
              is to mount by volume name. Examples: For volume /dev/sda1, you specify the
              partition as "1". Similarly, the volume partition for /dev/sda is "0" (or
              you can leave the property empty). More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • pdName (string) Unique name of the PD resource in GCE. Used to identify the disk in GCE.
              More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
              
          • gitRepo (Object) GitRepo represents a git repository at a particular revision. DEPRECATED:
            GitRepo is deprecated. To provision a container with a git repo, mount an
            EmptyDir into an InitContainer that clones the repo using git, then mount
            the EmptyDir into the Pod's container.
            
            Represents a volume that is populated with the contents of a git
            repository. Git repo volumes do not support ownership management. Git repo
            volumes support SELinux relabeling.
            
            DEPRECATED: GitRepo is deprecated. To provision a container with a git
            repo, mount an EmptyDir into an InitContainer that clones the repo using
            git, then mount the EmptyDir into the Pod's container.
            
            

            • directory (string) Target directory name. Must not contain or start with '..'. If '.' is
              supplied, the volume directory will be the git repository. Otherwise, if
              specified, the volume will contain the git repository in the subdirectory
              with the given name.
              
            • repository (string) Repository URL
              
            • revision (string) Commit hash for the specified revision.
              
          • glusterfs (Object) Glusterfs represents a Glusterfs mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md
            
            Represents a Glusterfs mount that lasts the lifetime of a pod. Glusterfs
            volumes do not support ownership management or SELinux relabeling.
            
            

            • endpoints (string) EndpointsName is the endpoint name that details Glusterfs topology. More
              info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • path (string) Path is the Glusterfs volume path. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
            • readOnly (boolean) ReadOnly here will force the Glusterfs volume to be mounted with read-only
              permissions. Defaults to false. More info:
              https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod
              
          • hostPath (Object) HostPath represents a pre-existing file or directory on the host machine
            that is directly exposed to the container. This is generally used for
            system agents or other privileged things that are allowed to see the host
            machine. Most containers will NOT need this. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#hostpath
            
            Represents a host path mapped into a pod. Host path volumes do not support
            ownership management or SELinux relabeling.
            
            

            • path (string) Path of the directory on the host. If the path is a symlink, it will follow
              the link to the real path. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
            • type (string) Type for HostPath Volume Defaults to "" More info:
              https://kubernetes.io/docs/concepts/storage/volumes#hostpath
              
          • iscsi (Object) ISCSI represents an ISCSI Disk resource that is attached to a kubelet's
            host machine and then exposed to the pod. More info:
            https://examples.k8s.io/volumes/iscsi/README.md
            
            Represents an ISCSI disk. ISCSI volumes can only be mounted as read/write
            once. ISCSI volumes support ownership management and SELinux relabeling.
            
            

            • chapAuthDiscovery (boolean) whether support iSCSI Discovery CHAP authentication
              
            • chapAuthSession (boolean) whether support iSCSI Session CHAP authentication
              
            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
              
            • initiatorName (string) Custom iSCSI Initiator Name. If initiatorName is specified with
              iscsiInterface simultaneously, new iSCSI interface (target portal):(volume
              name) will be created for the connection.
              
            • iqn (string) Target iSCSI Qualified Name.
              
            • iscsiInterface (string) iSCSI Interface Name that uses an iSCSI transport. Defaults to 'default'
              (tcp).
              
            • lun (integer) iSCSI Target Lun number.
              
            • portals ([]string) iSCSI Target Portal List. The portal is either an IP or ip_addr:port if the
              port is other than default (typically TCP ports 860 and 3260).
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false.
              
            • secretRef (Object) CHAP Secret for iSCSI target and initiator authentication
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • targetPortal (string) iSCSI Target Portal. The Portal is either an IP or ip_addr:port if the port
              is other than default (typically TCP ports 860 and 3260).
              
          • name (string) Volume's name. Must be a DNS_LABEL and unique within the pod. More info:
            https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
            
          • nfs (Object) NFS represents an NFS mount on the host that shares a pod's lifetime More
            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
            
            Represents an NFS mount that lasts the lifetime of a pod. NFS volumes do
            not support ownership management or SELinux relabeling.
            
            

            • path (string) Path that is exported by the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • readOnly (boolean) ReadOnly here will force the NFS export to be mounted with read-only
              permissions. Defaults to false. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
            • server (string) Server is the hostname or IP address of the NFS server. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#nfs
              
          • persistentVolumeClaim (Object) PersistentVolumeClaimVolumeSource represents a reference to a
            PersistentVolumeClaim in the same namespace. More info:
            https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
            
            PersistentVolumeClaimVolumeSource references the user's PVC in the same
            namespace. This volume finds the bound PV and mounts that volume for the
            pod. A PersistentVolumeClaimVolumeSource is, essentially, a wrapper around
            another type of volume that is owned by someone else (the system).
            
            

            • claimName (string) ClaimName is the name of a PersistentVolumeClaim in the same namespace as
              the pod using this volume. More info:
              https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
              
            • readOnly (boolean) Will force the ReadOnly setting in VolumeMounts. Default false.
              
          • photonPersistentDisk (Object) PhotonPersistentDisk represents a PhotonController persistent disk attached
            and mounted on kubelets host machine
            
            Represents a Photon Controller persistent disk resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • pdID (string) ID that identifies Photon Controller persistent disk
              
          • portworxVolume (Object) PortworxVolume represents a portworx volume attached and mounted on
            kubelets host machine
            
            PortworxVolumeSource represents a Portworx volume resource.
            
            

            • fsType (string) FSType represents the filesystem type to mount Must be a filesystem type
              supported by the host operating system. Ex. "ext4", "xfs". Implicitly
              inferred to be "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • volumeID (string) VolumeID uniquely identifies a Portworx volume
              
          • projected (Object) Items for all in one resources secrets, configmaps, and downward API
            
            Represents a projected volume source
            
            

            • defaultMode (integer) Mode bits used to set permissions on created files by default. Must be an
              octal value between 0000 and 0777 or a decimal value between 0 and 511.
              YAML accepts both octal and decimal values, JSON requires decimal values
              for mode bits. Directories within the path are not affected by this
              setting. This might be in conflict with other options that affect the file
              mode, like fsGroup, and the result can be other mode bits set.
              
            • sources ([]Object) list of volume projections
              
              Projection that may be projected along with other supported volume types
              
              

              • configMap (Object) information about the configMap data to project
                
                Adapts a ConfigMap into a projected volume.
                The contents of the target ConfigMap's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names, unless the items element is populated with specific mappings of keys
                to paths. Note that this is identical to a configmap volume source without
                the default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  ConfigMap will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the ConfigMap, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the ConfigMap or its keys must be defined
                  
              • downwardAPI (Object) information about the downwardAPI data to project
                
                Represents downward API info for projecting into a projected volume. Note
                that this is identical to a downwardAPI volume source without the default
                mode.
                
                

                • items ([]Object) Items is a list of DownwardAPIVolume file
                  
                  DownwardAPIVolumeFile represents information to create the file containing
                  the pod field
                  
                  

                  • fieldRef (Object) Required: Selects a field of the pod: only annotations, labels, name and
                    namespace are supported.
                    
                    ObjectFieldSelector selects an APIVersioned field of an object.
                    
                    

                    • apiVersion (string) Version of the schema the FieldPath is written in terms of, defaults to
                      "v1".
                      
                    • fieldPath (string) Path of the field to select in the specified API version.
                      
                  • mode (integer) Optional: mode bits used to set permissions on this file, must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) Required: Path is the relative path name of the file to be created. Must
                    not be absolute or contain the '..' path. Must be utf-8 encoded. The first
                    item of the relative path must not start with '..'
                    
                  • resourceFieldRef (Object) Selects a resource of the container: only resources limits and requests
                    (limits.cpu, limits.memory, requests.cpu and requests.memory) are currently
                    supported.
                    
                    ResourceFieldSelector represents container resources (cpu, memory) and
                    their output format
                    
                    

                    • containerName (string) Container name: required for volumes, optional for env vars
                      
                    • divisor (string) Specifies the output format of the exposed resources, defaults to "1"
                      
                      Quantity is a fixed-point representation of a number. It provides
                      convenient marshaling/unmarshaling in JSON and YAML, in addition to
                      String() and AsInt64() accessors.
                      
                      The serialization format is:
                      
                      (quantity) ::= (signedNumber)(suffix) (Note that (suffix) may be empty,
                      from the "" case in (decimalSI).) (digit) ::= 0 | 1 | ... | 9 (digits) ::=
                      (digit) | (digit)(digits) (number) ::= (digits) | (digits).(digits) |
                      (digits). | .(digits) (sign) ::= "+" | "-" (signedNumber) ::= (number) |
                      (sign)(number) (suffix) ::= (binarySI) | (decimalExponent) | (decimalSI)
                      (binarySI) ::= Ki | Mi | Gi | Ti | Pi | Ei (International System of units;
                      See: http://physics.nist.gov/cuu/Units/binary.html) (decimalSI) ::= m | ""
                      | k | M | G | T | P | E (Note that 1024 = 1Ki but 1000 = 1k; I didn't
                      choose the capitalization.) (decimalExponent) ::= "e" (signedNumber) | "E"
                      (signedNumber)
                      
                      No matter which of the three exponent forms is used, no quantity may
                      represent a number greater than 2^63-1 in magnitude, nor may it have more
                      than 3 decimal places. Numbers larger or more precise will be capped or
                      rounded up. (E.g.: 0.1m will rounded up to 1m.) This may be extended in the
                      future if we require larger or smaller quantities.
                      
                      When a Quantity is parsed from a string, it will remember the type of
                      suffix it had, and will use the same type again when it is serialized.
                      
                      Before serializing, Quantity will be put in "canonical form". This means
                      that Exponent/suffix will be adjusted up or down (with a corresponding
                      increase or decrease in Mantissa) such that:
                      a. No precision is lost b. No fractional digits will be emitted c. The
                      exponent (or suffix) is as large as possible. The sign will be omitted
                      unless the number is negative.
                      
                      Examples:
                      1.5 will be serialized as "1500m" 1.5Gi will be serialized as "1536Mi"
                      
                      Note that the quantity will NEVER be internally represented by a floating
                      point number. That is the whole point of this exercise.
                      
                      Non-canonical values will still parse as long as they are well formed, but
                      will be re-emitted in their canonical form. (So always use canonical form,
                      or don't diff.)
                      
                      This format is intended to make it difficult to use these numbers without
                      writing some sort of special handling code in the hopes that that will
                      cause implementors to also use a fixed point implementation.
                      
                    • resource (string) Required: resource to select
                      
              • secret (Object) information about the secret data to project
                
                Adapts a secret into a projected volume.
                The contents of the target Secret's Data field will be presented in a
                projected volume as files using the keys in the Data field as the file
                names. Note that this is identical to a secret volume source without the
                default mode.
                
                

                • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
                  Secret will be projected into the volume as a file whose name is the key
                  and content is the value. If specified, the listed keys will be projected
                  into the specified paths, and unlisted keys will not be present. If a key
                  is specified which is not present in the Secret, the volume setup will
                  error unless it is marked optional. Paths must be relative and may not
                  contain the '..' path or start with '..'.
                  
                  Maps a string key to a path within a volume.
                  
                  

                  • key (string) The key to project.
                    
                  • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                    value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                    accepts both octal and decimal values, JSON requires decimal values for
                    mode bits. If not specified, the volume defaultMode will be used. This
                    might be in conflict with other options that affect the file mode, like
                    fsGroup, and the result can be other mode bits set.
                    
                  • path (string) The relative path of the file to map the key to. May not be an absolute
                    path. May not contain the path element '..'. May not start with the string
                    '..'.
                    
                • name (string) Name of the referent. More info:
                  https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                  
                • optional (boolean) Specify whether the Secret or its key must be defined
                  
              • serviceAccountToken (Object) information about the serviceAccountToken data to project
                
                ServiceAccountTokenProjection represents a projected service account token
                volume. This projection can be used to insert a service account token into
                the pods runtime filesystem for use against APIs (Kubernetes API Server or
                otherwise).
                
                

                • audience (string) Audience is the intended audience of the token. A recipient of a token must
                  identify itself with an identifier specified in the audience of the token,
                  and otherwise should reject the token. The audience defaults to the
                  identifier of the apiserver.
                  
                • expirationSeconds (integer) ExpirationSeconds is the requested duration of validity of the service
                  account token. As the token approaches expiration, the kubelet volume
                  plugin will proactively rotate the service account token. The kubelet will
                  start trying to rotate the token if the token is older than 80 percent of
                  its time to live or if the token is older than 24 hours.Defaults to 1 hour
                  and must be at least 10 minutes.
                  
                • path (string) Path is the path relative to the mount point of the file to project the
                  token into.
                  
          • quobyte (Object) Quobyte represents a Quobyte mount on the host that shares a pod's lifetime
            
            Represents a Quobyte mount that lasts the lifetime of a pod. Quobyte
            volumes do not support ownership management or SELinux relabeling.
            
            

            • group (string) Group to map volume access to Default is no group
              
            • readOnly (boolean) ReadOnly here will force the Quobyte volume to be mounted with read-only
              permissions. Defaults to false.
              
            • registry (string) Registry represents a single or multiple Quobyte Registry services
              specified as a string as host:port pair (multiple entries are separated
              with commas) which acts as the central registry for volumes
              
            • tenant (string) Tenant owning the given Quobyte volume in the Backend Used with dynamically
              provisioned Quobyte volumes, value is set by the plugin
              
            • user (string) User to map volume access to Defaults to serivceaccount user
              
            • volume (string) Volume is a string that references an already created Quobyte volume by
              name.
              
          • rbd (Object) RBD represents a Rados Block Device mount on the host that shares a pod's
            lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md
            
            Represents a Rados Block Device mount that lasts the lifetime of a pod. RBD
            volumes support ownership management and SELinux relabeling.
            
            

            • fsType (string) Filesystem type of the volume that you want to mount. Tip: Ensure that the
              filesystem type is supported by the host operating system. Examples:
              "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
              More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
              
            • image (string) The rados image name. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • keyring (string) Keyring is the path to key ring for RBDUser. Default is /etc/ceph/keyring.
              More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • monitors ([]string) A collection of Ceph monitors. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • pool (string) The rados pool name. Default is rbd. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • readOnly (boolean) ReadOnly here will force the ReadOnly setting in VolumeMounts. Defaults to
              false. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
            • secretRef (Object) SecretRef is name of the authentication secret for RBDUser. If provided
              overrides keyring. Default is nil. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • user (string) The rados user name. Default is admin. More info:
              https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
              
          • scaleIO (Object) ScaleIO represents a ScaleIO persistent volume attached and mounted on
            Kubernetes nodes.
            
            ScaleIOVolumeSource represents a persistent ScaleIO volume
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Default is "xfs".
              
            • gateway (string) The host address of the ScaleIO API Gateway.
              
            • protectionDomain (string) The name of the ScaleIO Protection Domain for the configured storage.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef references to the secret for ScaleIO user and other sensitive
              information. If this is not provided, Login operation will fail.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • sslEnabled (boolean) Flag to enable/disable SSL communication with Gateway, default false
              
            • storageMode (string) Indicates whether the storage for a volume should be ThickProvisioned or
              ThinProvisioned. Default is ThinProvisioned.
              
            • storagePool (string) The ScaleIO Storage Pool associated with the protection domain.
              
            • system (string) The name of the storage system as configured in ScaleIO.
              
            • volumeName (string) The name of a volume already created in the ScaleIO system that is
              associated with this volume source.
              
          • secret (Object) Secret represents a secret that should populate this volume. More info:
            https://kubernetes.io/docs/concepts/storage/volumes#secret
            
            Adapts a Secret into a volume.
            The contents of the target Secret's Data field will be presented in a
            volume as files using the keys in the Data field as the file names. Secret
            volumes support ownership management and SELinux relabeling.
            
            

            • defaultMode (integer) Optional: mode bits used to set permissions on created files by default.
              Must be an octal value between 0000 and 0777 or a decimal value between 0
              and 511. YAML accepts both octal and decimal values, JSON requires decimal
              values for mode bits. Defaults to 0644. Directories within the path are not
              affected by this setting. This might be in conflict with other options that
              affect the file mode, like fsGroup, and the result can be other mode bits
              set.
              
            • items ([]Object) If unspecified, each key-value pair in the Data field of the referenced
              Secret will be projected into the volume as a file whose name is the key
              and content is the value. If specified, the listed keys will be projected
              into the specified paths, and unlisted keys will not be present. If a key
              is specified which is not present in the Secret, the volume setup will
              error unless it is marked optional. Paths must be relative and may not
              contain the '..' path or start with '..'.
              
              Maps a string key to a path within a volume.
              
              

              • key (string) The key to project.
                
              • mode (integer) Optional: mode bits used to set permissions on this file. Must be an octal
                value between 0000 and 0777 or a decimal value between 0 and 511. YAML
                accepts both octal and decimal values, JSON requires decimal values for
                mode bits. If not specified, the volume defaultMode will be used. This
                might be in conflict with other options that affect the file mode, like
                fsGroup, and the result can be other mode bits set.
                
              • path (string) The relative path of the file to map the key to. May not be an absolute
                path. May not contain the path element '..'. May not start with the string
                '..'.
                
            • optional (boolean) Specify whether the Secret or its keys must be defined
              
            • secretName (string) Name of the secret in the pod's namespace to use. More info:
              https://kubernetes.io/docs/concepts/storage/volumes#secret
              
          • storageos (Object) StorageOS represents a StorageOS volume attached and mounted on Kubernetes
            nodes.
            
            Represents a StorageOS persistent volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • readOnly (boolean) Defaults to false (read/write). ReadOnly here will force the ReadOnly
              setting in VolumeMounts.
              
            • secretRef (Object) SecretRef specifies the secret to use for obtaining the StorageOS API
              credentials. If not specified, default values will be attempted.
              
              LocalObjectReference contains enough information to let you locate the
              referenced object inside the same namespace.
              
              

              • name (string) Name of the referent. More info:
                https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
                
            • volumeName (string) VolumeName is the human-readable name of the StorageOS volume. Volume names
              are only unique within a namespace.
              
            • volumeNamespace (string) VolumeNamespace specifies the scope of the volume within StorageOS. If no
              namespace is specified then the Pod's namespace will be used. This allows
              the Kubernetes name scoping to be mirrored within StorageOS for tighter
              integration. Set VolumeName to any name to override the default behaviour.
              Set to "default" if you are not using namespaces within StorageOS.
              Namespaces that do not pre-exist within StorageOS will be created.
              
          • vsphereVolume (Object) VsphereVolume represents a vSphere volume attached and mounted on kubelets
            host machine
            
            Represents a vSphere volume resource.
            
            

            • fsType (string) Filesystem type to mount. Must be a filesystem type supported by the host
              operating system. Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be
              "ext4" if unspecified.
              
            • storagePolicyID (string) Storage Policy Based Management (SPBM) profile ID associated with the
              StoragePolicyName.
              
            • storagePolicyName (string) Storage Policy Based Management (SPBM) profile name.
              
            • volumePath (string) Path that identifies vSphere volume vmdk
              
  • status (Object) Status is the most recently observed status of the replication controller.
    This data may be out of date by some window of time. Populated by the
    system. Read-only. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
    
    ReplicationControllerStatus represents the current status of a replication
    controller.
    
    

    • availableReplicas (integer) The number of available replicas (ready for at least minReadySeconds) for
      this replication controller.
      
    • conditions ([]Object) Represents the latest available observations of a replication controller's
      current state.
      
      ReplicationControllerCondition describes the state of a replication
      controller at a certain point.
      
      

      • lastTransitionTime (string) The last time the condition transitioned from one status to another.
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
      • message (string) A human readable message indicating details about the transition.
        
      • reason (string) The reason for the condition's last transition.
        
      • status (string) Status of the condition, one of True, False, Unknown.
        
      • type (string) Type of replication controller condition.
        
    • fullyLabeledReplicas (integer) The number of pods that have labels matching the labels of the pod template
      of the replication controller.
      
    • observedGeneration (integer) ObservedGeneration reflects the generation of the most recently observed
      replication controller.
      
    • readyReplicas (integer) The number of ready replicas for this replication controller.
      
    • replicas (integer) Replicas is the most recently oberved number of replicas. More info:
      https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller
      
• ControllerRevision ControllerRevision implements an immutable snapshot of state data. Clients
  are responsible for serializing and deserializing the objects that contain
  their internal state. Once a ControllerRevision has been successfully
  created, it can not be updated. The API Server will fail validation of all
  requests that attempt to mutate the Data field. ControllerRevisions may,
  however, be deleted. Note that, due to its use by both the DaemonSet and
  StatefulSet controllers for update and rollback, this object is beta.
  However, it may be subject to name and representation changes in future
  releases, and clients should not depend on its stability. It is primarily
  for internal use by controllers.
  
  

  • apiVersion (string) APIVersion defines the versioned schema of this representation of an
    object. Servers should convert recognized schemas to the latest internal
    value, and may reject unrecognized values. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
    
  • data (map[string]) Data is the serialized representation of the state.
    
    RawExtension is used to hold extensions in external versions.
    To use this, make a field which has RawExtension as its type in your
    external, versioned struct, and Object in your internal struct. You also
    need to register your various plugin types.
    
    // Internal package: type MyAPIObject struct { runtime.TypeMeta
    `json:",inline"` MyPlugin runtime.Object `json:"myPlugin"` } type PluginA
    struct { AOption string `json:"aOption"` }
    
    // External package: type MyAPIObject struct { runtime.TypeMeta
    `json:",inline"` MyPlugin runtime.RawExtension `json:"myPlugin"` } type
    PluginA struct { AOption string `json:"aOption"` }
    
    // On the wire, the JSON will look something like this: {
    "kind":"MyAPIObject", "apiVersion":"v1", "myPlugin": { "kind":"PluginA",
    "aOption":"foo", }, }
    
    So what happens? Decode first uses json or yaml to unmarshal the serialized
    data into your external MyAPIObject. That causes the raw JSON to be stored,
    but not unpacked. The next step is to copy (using pkg/conversion) into the
    internal struct. The runtime package's DefaultScheme has conversion
    functions installed which will unpack the JSON stored in RawExtension,
    turning it into the correct object type, and storing it in the Object.
    (TODO: In the case where the object is of an unknown type, a
    runtime.Unknown object will be created and stored.)
    
    RawExtension is used to hold extensions in external versions.
    To use this, make a field which has RawExtension as its type in your
    external, versioned struct, and Object in your internal struct. You also
    need to register your various plugin types.
    
    // Internal package: type MyAPIObject struct { runtime.TypeMeta
    `json:",inline"` MyPlugin runtime.Object `json:"myPlugin"` } type PluginA
    struct { AOption string `json:"aOption"` }
    
    // External package: type MyAPIObject struct { runtime.TypeMeta
    `json:",inline"` MyPlugin runtime.RawExtension `json:"myPlugin"` } type
    PluginA struct { AOption string `json:"aOption"` }
    
    // On the wire, the JSON will look something like this: {
    "kind":"MyAPIObject", "apiVersion":"v1", "myPlugin": { "kind":"PluginA",
    "aOption":"foo", }, }
    
    So what happens? Decode first uses json or yaml to unmarshal the serialized
    data into your external MyAPIObject. That causes the raw JSON to be stored,
    but not unpacked. The next step is to copy (using pkg/conversion) into the
    internal struct. The runtime package's DefaultScheme has conversion
    functions installed which will unpack the JSON stored in RawExtension,
    turning it into the correct object type, and storing it in the Object.
    (TODO: In the case where the object is of an unknown type, a
    runtime.Unknown object will be created and stored.)
    
  • kind (string) Kind is a string value representing the REST resource this object
    represents. Servers may infer this from the endpoint the client submits
    requests to. Cannot be updated. In CamelCase. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
    
  • metadata (Object) Standard object's metadata. More info:
    https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
    
    ObjectMeta is metadata that all persisted resources must have, which
    includes all objects users must create.
    
    

    • annotations (map[string]string) Annotations is an unstructured key value map stored with a resource that
      may be set by external tools to store and retrieve arbitrary metadata. They
      are not queryable and should be preserved when modifying objects. More
      info: http://kubernetes.io/docs/user-guide/annotations
      
    • clusterName (string) The name of the cluster which the object belongs to. This is used to
      distinguish resources with same name and namespace in different clusters.
      This field is not set anywhere right now and apiserver is going to ignore
      it if set in create or update request.
      
    • creationTimestamp (string) CreationTimestamp is a timestamp representing the server time when this
      object was created. It is not guaranteed to be set in happens-before order
      across separate operations. Clients may not set this value. It is
      represented in RFC3339 form and is in UTC.
      
      Populated by the system. Read-only. Null for lists. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • deletionGracePeriodSeconds (integer) Number of seconds allowed for this object to gracefully terminate before it
      will be removed from the system. Only set when deletionTimestamp is also
      set. May only be shortened. Read-only.
      
    • deletionTimestamp (string) DeletionTimestamp is RFC 3339 date and time at which this resource will be
      deleted. This field is set by the server when a graceful deletion is
      requested by the user, and is not directly settable by a client. The
      resource is expected to be deleted (no longer visible from resource lists,
      and not reachable by name) after the time in this field, once the
      finalizers list is empty. As long as the finalizers list contains items,
      deletion is blocked. Once the deletionTimestamp is set, this value may not
      be unset or be set further into the future, although it may be shortened or
      the resource may be deleted prior to this time. For example, a user may
      request that a pod is deleted in 30 seconds. The Kubelet will react by
      sending a graceful termination signal to the containers in the pod. After
      that 30 seconds, the Kubelet will send a hard termination signal (SIGKILL)
      to the container and after cleanup, remove the pod from the API. In the
      presence of network partitions, this object may still exist after this
      timestamp, until an administrator or automated process can determine the
      resource is fully terminated. If not set, graceful deletion of the object
      has not been requested.
      
      Populated by the system when a graceful deletion is requested. Read-only.
      More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      
      Time is a wrapper around time.Time which supports correct marshaling to
      YAML and JSON. Wrappers are provided for many of the factory methods that
      the time package offers.
      
    • finalizers ([]string) Must be empty before the object is deleted from the registry. Each entry is
      an identifier for the responsible component that will remove the entry from
      the list. If the deletionTimestamp of the object is non-nil, entries in
      this list can only be removed. Finalizers may be processed and removed in
      any order. Order is NOT enforced because it introduces significant risk of
      stuck finalizers. finalizers is a shared field, any actor with permission
      can reorder it. If the finalizer list is processed in order, then this can
      lead to a situation in which the component responsible for the first
      finalizer in the list is waiting for a signal (field value, external
      system, or other) produced by a component responsible for a finalizer later
      in the list, resulting in a deadlock. Without enforced ordering finalizers
      are free to order amongst themselves and are not vulnerable to ordering
      changes in the list.
      
    • generateName (string) GenerateName is an optional prefix, used by the server, to generate a
      unique name ONLY IF the Name field has not been provided. If this field is
      used, the name returned to the client will be different than the name
      passed. This value will also be combined with a unique suffix. The provided
      value has the same validation rules as the Name field, and may be truncated
      by the length of the suffix required to make the value unique on the
      server.
      
      If this field is specified and the generated name exists, the server will
      NOT return a 409 - instead, it will either return 201 Created or 500 with
      Reason ServerTimeout indicating a unique name could not be found in the
      time allotted, and the client should retry (optionally after the time
      indicated in the Retry-After header).
      
      Applied only if Name is not specified. More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
      
    • generation (integer) A sequence number representing a specific generation of the desired state.
      Populated by the system. Read-only.
      
    • labels (map[string]string) Map of string keys and values that can be used to organize and categorize
      (scope and select) objects. May match selectors of replication controllers
      and services. More info: http://kubernetes.io/docs/user-guide/labels
      
    • managedFields ([]Object) ManagedFields maps workflow-id and version to the set of fields that are
      managed by that workflow. This is mostly for internal housekeeping, and
      users typically shouldn't need to set or understand this field. A workflow
      can be the user's name, a controller's name, or the name of a specific
      apply path like "ci-cd". The set of fields is always in the version that
      the workflow used when modifying the object.
      
      ManagedFieldsEntry is a workflow-id, a FieldSet and the group version of
      the resource that the fieldset applies to.
      
      

      • apiVersion (string) APIVersion defines the version of this resource that this field set applies
        to. The format is "group/version" just like the top-level APIVersion field.
        It is necessary to track the version of a field set because it cannot be
        automatically converted.
        
      • fieldsType (string) FieldsType is the discriminator for the different fields format and
        version. There is currently only one possible value: "FieldsV1"
        
      • fieldsV1 (map[string]) FieldsV1 holds the first JSON version format as described in the "FieldsV1"
        type.
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
        FieldsV1 stores a set of fields in a data structure like a Trie, in JSON
        format.
        
        Each key is either a '.' representing the field itself, and will always map
        to an empty set, or a string representing a sub-field or item. The string
        will follow one of these four formats: 'f:(name)', where (name) is the name
        of a field in a struct, or key in a map 'v:(value)', where (value) is the
        exact json formatted value of a list item 'i:(index)', where (index) is
        position of a item in a list 'k:(keys)', where (keys) is a map of a list
        item's key fields to their unique values If a key maps to an empty Fields
        value, the field that key represents is part of the set.
        
        The exact format is defined in sigs.k8s.io/structured-merge-diff
        
      • manager (string) Manager is an identifier of the workflow managing these fields.
        
      • operation (string) Operation is the type of operation which lead to this ManagedFieldsEntry
        being created. The only valid values for this field are 'Apply' and
        'Update'.
        
      • subresource (string) Subresource is the name of the subresource used to update that object, or
        empty string if the object was updated through the main resource. The value
        of this field is used to distinguish between managers, even if they share
        the same name. For example, a status update will be distinct from a regular
        update using the same manager name. Note that the APIVersion field is not
        related to the Subresource field and it always corresponds to the version
        of the main resource.
        
      • time (string) Time is timestamp of when these fields were set. It should always be empty
        if Operation is 'Apply'
        
        Time is a wrapper around time.Time which supports correct marshaling to
        YAML and JSON. Wrappers are provided for many of the factory methods that
        the time package offers.
        
    • name (string) Name must be unique within a namespace. Is required when creating
      resources, although some resources may allow a client to request the
      generation of an appropriate name automatically. Name is primarily intended
      for creation idempotence and configuration definition. Cannot be updated.
      More info: http://kubernetes.io/docs/user-guide/identifiers#names
      
    • namespace (string) Namespace defines the space within which each name must be unique. An empty
      namespace is equivalent to the "default" namespace, but "default" is the
      canonical representation. Not all objects are required to be scoped to a
      namespace - the value of this field for those objects will be empty.
      
      Must be a DNS_LABEL. Cannot be updated. More info:
      http://kubernetes.io/docs/user-guide/namespaces
      
    • ownerReferences ([]Object) List of objects depended by this object. If ALL objects in the list have
      been deleted, this object will be garbage collected. If this object is
      managed by a controller, then an entry in this list will point to this
      controller, with the controller field set to true. There cannot be more
      than one managing controller.
      
      OwnerReference contains enough information to let you identify an owning
      object. An owning object must be in the same namespace as the dependent, or
      be cluster-scoped, so there is no namespace field.
      
      

      • apiVersion (string) API version of the referent.
        
      • blockOwnerDeletion (boolean) If true, AND if the owner has the "foregroundDeletion" finalizer, then the
        owner cannot be deleted from the key-value store until this reference is
        removed. Defaults to false. To set this field, a user needs "delete"
        permission of the owner, otherwise 422 (Unprocessable Entity) will be
        returned.
        
      • controller (boolean) If true, this reference points to the managing controller.
        
      • kind (string) Kind of the referent. More info:
        https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
        
      • name (string) Name of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#names
        
      • uid (string) UID of the referent. More info:
        http://kubernetes.io/docs/user-guide/identifiers#uids
        
    • resourceVersion (string) An opaque value that represents the internal version of this object that
      can be used by clients to determine when objects have changed. May be used
      for optimistic concurrency, change detection, and the watch operation on a
      resource or set of resources. Clients must treat these values as opaque and
      passed unmodified back to the server. They may only be valid for a
      particular resource or set of resources.
      
      Populated by the system. Read-only. Value must be treated as opaque by
      clients and . More info:
      https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
      
    • selfLink (string) SelfLink is a URL representing this object. Populated by the system.
      Read-only.
      
      DEPRECATED Kubernetes will stop propagating this field in 1.20 release and
      the field is planned to be removed in 1.21 release.
      
    • uid (string) UID is the unique in time and space value for this object. It is typically
      generated by the server on successful creation of a resource and is not
      allowed to change on PUT operations.
      
      Populated by the system. Read-only. More info:
      http://kubernetes.io/docs/user-guide/identifiers#uids
      
  • revision (integer) Revision indicates the revision of the state represented by Data.